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Independent  Orbiter  Assessment 
Analysis  of  the  Main  Propulsion  System 


1 . 0 EXECUTIVE  SUMMARY 

The  McDonnell  Douglas  Astronautics  Company  ( MDAC ) was  selected  in 
June  1986  to  perform  an  Independent  Orbiter  Assessment  (IOA)  of 
the  Failure  Modes  and  Effects  Analysis  (FMEA)  and  Critical  Items 
List  (CIL) . Direction  was  given  by  the  STS  Orbiter  and  GFE 
Projects  Office  to  perform  the  hardware  analysis  using  the 
instructions  and  ground  rules  defined  in  NSTS  22206 , Instructions 
for  Preparation  of  FMEA  and  CIL,  October  1986 . The  IOA 
approach  features  a top-down  analysis  of  the  hardware  to 
determine  failure  modes,  criticality,  and  potential  critical 
items.  To  preserve  independence,  this  analysis  was  accomplished 
without  reliance  upon  the  results  contained  within  the  NASA 
FMEA/CIL  documentation.  This  report  documents  (Appendix  C)  the 
independent  analysis  results  for  the  Orbiter  Main  Propulsion 
System  (MPS)  hardware. 

The  Orbiter  MPS  consists  of  two  subsystems;  the  Propellant 
Management  Subsystem  (PMS)  and  the  Helium  Subsystem.  The  PMS  is 
a system  of  manifolds,  distribution  lines  and  valves  by  which  the 
liquid  propellants  pass  from  the  External  Tank  (ET)  to  the  Space 
Shuttle  Main  Engines  (SSMEs)  and  gaseous  propellants  pass  from 
the  SSMEs  to  the  ET.  The  Helium  Subsystem  consists  of  a series 
of  helium  supply  tanks  and  their  associated  regulators,  check 
valves,  distribution  lines,  and  control  valves.  The  Helium 
Subsystem  supplies  helium  that  is  used  within  the  SSMEs  for  in- 
flight purges  and  provides  pressure  for  actuation  of  SSME  valves 
during  emergency  pneumatic  shutdowns.  The  balance  of  the  helium 
is  used  to  provide  pressure  to  operate  the  pneumatically  actuated 
valves  within  the  PMS. 

The  IOA  analysis  made  use  of  available  Orbiter  MPS  schematics  and 
hardware  assembly  and  component  drawings.  Each  component  was 
evaluated  and  analyzed  for  possible  failure  modes  and  effects. 
Criticalities  were  assigned  based  on  the  worst  possible  effect 
of  each  failure  mode. 

A summary  of  the  number  of  possible  failure  modes  and  correspond- 
ing criticalities  is  given  below.  The  presentation  format  is 
Hardware  (HW)  criticality  first  and  Functional  (F)  criticality 
second . 
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I Summary  of  IOA  Failure  Modes  By  Criticality  (HW/F)  I 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

Number  : 

129 

142 

30 

94 

70 

225 

690 
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Figure  1 presents  a summary  of  the  failure  criticalities  for  each 
of  the  MPS  subsystems. 

For  each  failure  mode  identified,  the  criticality  and  redundancy 
screens  were  examined  to  identify  critical  items.  A summary  of 
Potential  Critical  Items  (PCIs)  is  presented  as  follows: 


Summary  of  IOA  Potential  Critical  Items  (HW/F) 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

TOTAL 

Number  : 

129 

142 

30 

25 

23 

349 

Of  the  690  failure  modes  analyzed,  349  were  determined  to  be  PCIs. 
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ORBiTER  MPS  SUMMARY 


CRIT 

#FM 

#PCI 

1/1 
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129 

2/1 R 

142 

142 

2/2 

30 
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3/1 R 

94 

25 
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70 

23 

3/  3 

225 

— 

TOTAL 

690 

349 
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2 . 0  INTRODUCTION 


2 . 1  Purpose 

The  51-L  Challenger  accident  prompted  the  NASA  to  readdress 
safety  policies,  concepts,  and  rationale  being  used  in  the 
National  Space  Transportation  System  (NSTS).  The  NSTS  Office  has 
undertaken  the  task  of  reevaluating  the  FMEA/CIL  for  the  Space 
Shuttle  design.  The  MDAC  is  providing  an  independent  assessment 
of  the  Orbiter  FMEA/CIL  for  completeness  and  technical  accuracy. 


2 . 2  Scope 

The  scope  of  the  independent  FMEA/CIL  assessment  activity 
encompasses  those  Shuttle  Orbiter  subsystems  and  GFE  hardware 
identified  in  the  Space  Shuttle  Independent  FMEA/CIL  Assessment 
Contractor  Statement  of  Work.  Each  subsystem  analysis  addresses 
hardware,  functions,  internal  and  external  interfaces,  and 
operational  requirements  for  all  mission  phases. 


2.3  Analysis  Approach 

The  independent  analysis  approach  is  a top-down  analysis  utiliz- 
ing as-available  drawings  to  break  down  the  respective  subsystem 
into  components  and  low-level  hardware  items.  Each  hardware  item 
is  evaluated  for  failure  mode,  effects,  and  criticality.  These 
data  are  documented  in  the  respective  subsystem  analysis  report, 
and  are  used  to  assess  the  NASA  and  Prime  Contractor  FMEA/CIL 
reevaluation  results.  The  IOA  analysis  approach  is  summarized  in 
the  following  Steps  1.0  through  3.0.  Step  4.0  summarizes  the 
assessment  of  the  NASA  and  Prime  Contractor  FMEAs/CILs  that  is 
performed  and  documented  at  a later  date. 

Step  1.0  Subsystem  familiarization 

1.1  Define  subsystem  functions 

1 . 2 Define  subsystem  components 

1.3  Define  subsystem  specific  ground  rules  and 
assumptions 

Step  2.0  Define  subsystem  analysis  diagram 

2.1  Define  subsystem 

2.2  Define  major  assemblies 

2 . 3 Develop  detailed  subsystem  representations 

Step  3.0  Failure  events  definition 

3.1  Construct  matrix  of  failure  modes 

3.2  Document  IOA  analysis  results 
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Step  4.0  Compare  IOA  analysis  data  to  NASA  FMEA/CIL 

4.1  Resolve  differences 

4.2  Review  in-house 

4.3  Document  assessment  issues 

4.4  Forward  findings  to  Project  Manager 


2.4  Orbiter  MPS  Ground  Rules  and  Assumptions 

The  Orbiter  MPS  ground  rules  and  assumptions  used  in  the  IOA  are 
defined  in  Appendix  B. 
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3 . 0  SUBSYSTEM  DESCRIPTION 


3.1  Design  and  Function 

The  Orbiter  Main  Propulsion  System  is  composed  of  the  Propellant 
Management  Subsystem  (PMS)  consisting  of  the  L02  and  LH2 
subsystems  and  the  Helium  Subsystem  (Figures  2A  thru  2D) . The 
PMS  is  a system  of  manifolds,  distribution  lines,  and  valves  by 
which  the  liquid  propellants  pass  from  the  ET  to  the  SSMEs.  Some 
of  the  propellants  are  vaporized  in  the  engine  and  returned  to 
the  ET  to  maintain  ullage  pressure.  The  Helium  Subsystem 
consists  of  a series  of  helium  supply  tanks  and  their  associated 
regulators,  check  valves,  distribution  lines,  and  control  valves. 
The  Helium  Subsystem  supplies  helium  that  is  used  within  the 
SSMEs  for  in-flight  purges  and  provides  pressure  for  actuating 
SSME  valves  during  emergency  pneumatic  shutdowns.  The  balance  of 
the  helium  is  used  to  provide  pressure  to  actuate  all  the 
pneumatically  operated  valves  within  the  PMS. 

3.1.1  Propellant  Management  Subsystem  Function 

During  engine  burn,  propellants  under  tank  pressure  flow  from  the 
ET  to  the  Orbiter  through  two  umbilicals;  one  for  LQ2  and  the 
other  for  LH2  (Figures  3 and  4,  respectively). 

The  PMS  also  provides  a path  which  allows  gases  tapped  from  the 
three  engines  to  flow  back  to  the  ET,  through  two  gas  umbilicals, 
to  maintain  pressures  in  the  fuel  and  oxidizer  tanks. 

The  PMS  also  functions  during  phases  other  than  engine  burn. 
During  prelaunch,  the  PMS  is  used  to  control  the  loading  of 
propellants  in  the  ET.  During  orbit,  PMS  controls  propellant 
dump,  vacuum  inerting,  and  system  repressurization  (for  entry). 

3.1.2  The  PMS  Components 

The  PMS  contains  the  following  major  components  (Figures  3 and 
4)  . 

A.  Liquid  Propellant  Supply  and  Distribution  Network.  The 
network  is  composed  of  all  the  liquid  propellant  lines 
used  to  load  propellants  during  prelaunch,  feed 
propellants  to  the  SSMEs  during  engine  burn,  and  dump 
residual  propellants  after  ET  separation. 

Specifically,  the  network  consists  of: 

1.  Propellant  Feedline  Manifolds  - There  are  two  17- 
inch  diameter  manifolds  in  the  Orbiter,  one  for 
L02  and  one  for  LH2 . Both  of  the  manifolds  have  a 
feedline  disconnect  valve  at  one  end  and  two  fill 
and  drain  valves  (one  inboard,  one  outboard) 
connected  in  series  at  the  other  end.  The  feed- 
line manifolds  connect  to  the  ET  liquid  propellant 
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ORBITER 


Figure  2B  - ORBITER  MPS  L02  SUBSYSTEM  OVERVIEW 
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ORBITER 

MPS 


Figure  2D 
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ORBITER  MPS  HELIUM  SUBSYSTEM  OVERVIEW 
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Figure  3 - PROPELLANT  MANAGEMENT  SUBSYSTEM  OXIDIZER  FLOW 
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Figure  4 - PROPELLANT  MANAGEMENT  SUBSYSTEM  FUEL  FLOW 
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FUFl  SUBSYSTEM  REPRESS. 


umbilicals  at  the  feedline  disconnect  valve,  and 
to  either  GSE  liquid  propellant  umbilicals 
(prelaunch  only),  or  overboard  at  the  outboard 
fill  and  drain  valves. 

Between  the  feedline  disconnect  valves  and  the 
inboard  fill  and  drain  valves  are  three  outlets 
for  the  three  engine  propellant  feedlines  and  one 
outlet  for  the  propellant  feedline  relief  line. 

The  LH2  feedline  manifold  contains  an  extra  outlet 
for  the  LH2  Return  to  Launch  Site  (RTLS ) feedline 
dump  line.  (See  paragraph  4 below.)  Pressures 
within  the  L02  and  the  LH2  feedline  manifolds 
(MANF)  can  be  monitored  on  the  two  ENG  MANF  meters 
on  Panel  F7  or  the  CRT  display  Guidance  and 
Navigation  Control  (GNC)  System  (SYS)  SUMM  1 
Backup  Flight  System  ( BFS ) . 

2.  Engine  Propellant  Feedlines  - There  are  six  12- 
inch  diameter  feedlines  in  the  Orbiter,  three  for 
L02  and  three  for  LH2.  Each  of  the  L02  engine 
propellant  feedlines  connects  to  the  L02  feedline 
manifold  at  one  end  and  to  the  Low  Pressure 
Oxidizer  Turbopump  (LPOT)  inlet  of  one  of  the 
SSMEs  at  the  other  end.  Likewise,  each  of  the  LH2 
engine  propellant  feedlines  connects  to  the  LH2 
feedline  manifold  at  one  end  and  to  the  Low 
Pressure  Fuel  Turbopump  (LPFT)  inlet  at  one  of  the 
SSMEs  at  the  other  end.  There  is  one  prevalve  in 
each  of  the  six  engine  propellant  feedlines.  The 
prevalves  are  designated  as  left,  center,  or  right 
(engine)  L02  prevalve;  or  left,  center,  or  right 
(engine)  LH2  prevalve. 

3.  Propellant  Feedline  Relief  Line  - There  are  two  1- 
inch  diameter  relief  lines  in  the  Orbiter,  one  for 
L02  and  one  for  LH2.  Each  relief  line  connects  to 
one  of  the  propellant  feedline  manifolds  at  one 
end  and  to  an  overboard  port  at  the  other  end. 

Each  relief  line  contains  a relief  valve  and  a 
pneumatically  actuated  relief  isolation  valve. 

The  isolation  valve  is  mounted  in  series  with,  and 
upstream  of,  the  relief  valve.  Flow  through  the 
relief  line  and  relief  valve  is  enabled  by  reliev- 
ing closing  pressure  on  the  normally  open 
isolation  valve,  allowing  it  to  open. 

The  position  of  the  relief  isolation  valve  (2)  is 
controlled  by  one  of  two  FEEDLINE  RLF  ISOL 
switches  on  Panel  R4.  Normally  these  switches  are 
left  in  the  GPC  position.  With  the  switches  (2) 
in  this  position,  both  relief  isolation  valves 
will  be  opened  automatically  immediately  after 
MECO. 
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The  purpose  of  the  relief  lines  is  to  prevent 
excessive  pressure  build-ups,  generated  by  heatup 
and  expansion  of  the  propellants  in  the  feedline 
manifolds,  by  allowing  the  pressure  to  be  vented 
overboard  through  the  relief  valves. 

4.  LH2  RTLS  Feedline  Dump  Line  - This  is  a single  2 
inch  diameter  line  which  connects  to  the  LH2 
feedline  manifold  at  one  end  and  to  an  overboard 
port  at  the  other  end.  (The  overboard  port  is 
located  on  the  outer  skin  of  the  left  side  of  the 
Orbiter  between  the  Orbital  Maneuvering  System 
(OMS)  pod  and  the  upper  surface  of  the  wing.)  The 
line  is  used  for  dumping  residual  LH2  during  an 
RTLS  abort.  In  non-RTLS  situations,  the  pilot  can 
use  the  backup  LH2  dump  switch  to  open  these 
valves.  Flow  through  the  line  is  controlled  by 
two  series-connected,  normally  closed,  LH2  RTLS 
dump  valves  (one  inboard,  one  outboard)  which  are 
mounted  in  the  line.  The  LH2  RTLS  dump  valves  are 
controlled  automatically  by  GPC  commands. 

B.  Gaseous  Propellant  Collection  and  Supply  Network.  The 
network  consists  of  all  the  lines  used  to  collect  and 
supply  gaseous  propellants  (G02  and  GH2 ) from  all  three 
SSMEs  to  the  ET  to  maintain  propellant  tank  pressure 
during  main  engine  burn.  (Note:  This  network  has  no 

major  function  after  ET  separation.)  Specifically,  the 
gaseous  propellant  collection  and  supply  network 
consists  of  the  following. 

1.  Engine  ET  Pressurization  Output  Lines  - There  are 
six  0.63-inch  diameter  pressurization  lines  in  the 
Orbiter,  three  for  G02  and  three  for  GH2 . Each  of 
the  G02  pressurization  lines  connects  to  the 
oxidizer  heat  exchanger  outlet  of  one  of  the  SSMEs 
at  one  end  and  the  G02  ET  pressurization  manifold 
at  the  other  end.  Each  of  the  GH2  pressurization 
lines  connects  to  the  LPFT  turbine  outlet  of  one 
of  the  SSMEs  at  one  end  and  the  GH2  ET  pressuriza- 
tion manifold  at  the  other  end.  Six  flow  control 
valves  are  used  to  control  ullage  pressure  in  the 
two  ET  propellant  tanks. 

2.  ET  Pressurization  Manifolds  - There  are  two  2-inch 
diameter  manifolds  in  the  Orbiter,  one  for  G02  and 
one  for  GH2.  At  each  end  of  both  manifolds  are 
self-sealing  quick  disconnects.  The  pressurization 
manifolds  connect  to  the  ET  gaseous  propellant 
umbilicals  at  one  set  of  quick-disconnects  and  to 
the  GSE  helium  pressurization  umbilicals  at  the 
other  set  of  quick-disconnects.  The  GSE  helium 
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pressurization  umbilicals  (2)  are  used  for  the 
initial  pressurization  of  the  ET  propellant  tanks 
during  prelaunch. 

Each  pressurization  manifold  contains  inlets  for 
the  three  engine  ET  pressurization  output  lines. 
(The  ET  GH2  pressurization  manifold  contains,  in 
addition  to  the  three  inlets,  an  outlet  for  the 
GH2  pressurization  vent  line.  (See  paragraph  3 
below. ) 

3.  GH2  Pressurization  Vent  Line  - This  is  a single 
line  which  connects  to  the  ET  GH2  pressurization 
manifold  line  at  one  end  and  to  an  overboard  port 
at  the  other  end.  This  line  is  used  exclusively 
for  vacuum  inerting  the  GH2  pressurization  lines 
during  orbit.  Flow  through  the  line  is  controlled 
by  the  normally  closed  GH2  pressurization  line 
vent  valve  which  is  mounted  in  the  line.  This 
valve  is  controlled  by  the  GH2  PRESS  LINE  VENT 
switch  on  cockpit  Panel  R4. 

Valves  - There  are  two  basic  types  of  valves  used  in 
the  PMS : those  that  are  pneumatically  actuated  and 
those  that  are  electrically  actuated.  Pneumatically 
actuated  valves  are  used  where  large  loads  are 
encountered,  such  as  in  the  control  of  liquid 
propellant  flows.  Electrically  actuated  valves  are 
used  where  lighter  loads  are  encountered,  such  as  in 
the  control  of  gaseous  propellant  flows . 

Pneumatically  actuated  valves  can  be  further  divided 
into  two  subtypes  - those  that  require  pneumatic 
pressure  to  open  and  close  the  valve  (type  1)  and  those 
that  are  spring-loaded  to  one  position  and  require 
pneumatic  pressure  to  move  to  the  other  position  (type 
2)  . 

The  following  is  a list  of  the  type  1 valves . 

LH2  feedline  disconnect  valve 
L02  feedline  disconnect  valve 
LH2  prevalves  ( 3 ) 

L02  prevalves  ( 3 ) 

LH2  inboard  fill/drain  valve 
L02  inboard  fill/drain  valve 
LH2  outboard  fill/drain  valve 
L02  outboard  fill/drain  valve 

Each  type  1 valve  actuator  is  equipped  with  two 
electrically  actuated  solenoid  valves.  Each  of  the  two 
solenoid  valves  controls  helium  pressure  to  either  an 
"open"  port  or  a "close"  port  on  the  actuator. 
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Energizing  the  solenoid  valve  connected  to  the  "open" 
port  will  allow  helium  pressure  to  open  the  pneumatic 
valve.  Similarly,  closing  of  the  pneumatic  valve  is 
performed  by  energizing  the  solenoid  valve  connected  to 
the  "close"  port.  (The  L02  Prevalves  have  four 
solenoids,  two  redundant  solenoids  each  to  control 
helium  pressure  to  the  "open"  and  to  the  "closed" 
ports . ) 

Removing  power  from  a solenoid  valve  not  only  removes 
helium  pressure  from  the  corresponding  port  of  the 
pneumatic  actuator,  but  also  allows  the  helium  pressure 
trapped  in  that  side  of  the  actuator  to  vent  overboard. 
Removing  power  from  both  solenoids  allows  the  pneumatic 
valve  to  remain  in  its  last  commanded  position. 

The  following  is  a list  of  the  type  2 valves. 

LH2  RTLS  inboard  dump  valve.  Normally  Closed  (NC) 

LH2  RTLS  outboard  dump  valve  (NC) 

LH2  feedline  relief  shutoff  valve.  Normally  Open  (NO) 
L02  feedline  relief  shutoff  valve  (NO) 

L02  Pogo  accumulator  recirculation  valve  (NO) 

Each  type  2 valve  is  equipped  with  a single 
electrically  actuated  solenoid  valve  which  controls 
helium  pressure  to  either  an  "open"  port  or  a "close" 
port  on  the  actuator.  Removing  power  from  the  solenoid 
valve  removes  helium  pressure  from  the  corresponding 
port  of  the  pneumatic  actuator  and  allows  helium 
pressure  trapped  in  that  side  of  the  actuator  to  vent 
overboard.  Spring  force  will  then  take  over  and  drive 
the  valve  to  the  opposite  position.  If  the  spring 
force  drives  the  valve  to  the  open  position,  the  valve 
is  referred  to  as  a Normally  Open  (NO)  valve.  If  the 
spring  force  drives  the  valve  to  the  closed  position, 
the  valve  is  referred  to  as  a Normally  Closed  (NC) 
valve. 

The  following  is  a list  of  the  electrically  actuated 
solenoid  valves: 

H2  pressurization  line  vent  valve  (NC) 

GH2  pressurization  flow  control  valves  (3)  (NO) 

GO 2 pressurization  flow  control  valves  (3)  (NO) 

The  above  electrically  actuated  valves  are  spring- 
loaded  to  one  position  and  move  to  the  other  position 
when  power  is  applied.  These  valves  are  referred  to  as 
either  normally  open  or  normally  closed,  based  on  their 
position  in  the  de-energized  state. 
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3.1.3 


Orblter  MPS  - Helium  Subsystem  General  Description 


The  helium  subsystem  consists  of  seven  4.7-ft3  helium  supply 
tanks,  three  17.3-ft3  helium  supply  tanks,  and  their  associated 
regulators,  check  valves,  distribution  lines,  and  control  valves 
(Figure  5).  Four  of  the  4.7-ft3  helium  supply  tanks  are  located 
within  the  Orbiter  aft  of  the  payload  bay  area.  The  other  three 
4.7-ft3  supply  tanks  and  the  three  17.3-ft3  supply  tanks  are 
located  below  the  payload  bay  liner  and  above  the  main  landing 
gear  cavity.  Each  of  the  17.3-ft3  supply  tanks  is  plumbed  to  two 
of  the  4 . 7-ft3  supply  tanks  (one  in  the  mid-body,  the  other  in 
the  aft  body)  to  form  three  sets  of  three  tanks.  Each  set  of 
tanks,  thus  formed,  normally  provides  helium  to  only  one  engine 
and  for  this  reason  is  commonly  referred  to  by  the  engine's 
designation;  for  example,  "left  engine  helium."  This  helium  is 
used  for  in-flight  purges  of  engines,  aft  compartments,  and 
provides  pressure  for  actuating  engine  valves  during  emergency 
pneumatic  shutdowns. 

The  remaining  4.7-ft3  helium  supply  tank  (the  one  which  is  not 
connected  to  a 17.3-ft3  tank)  is  called  the  "pneumatic  helium" 
supply  tank.  It  normally  provides  pressure  to  actuate  all  of  the 
pneumatically  operated  valves  within  the  propellant  management 
subsystem  (Figure  5). 

Each  of  the  four  helium  supply  circuits  described  above  (three 
engine  helium  and  one  pneumatic  helium)  will  operate 
independently  until  after  MECO,  when  the  three  "out"  helium 
interconnect  valves  will  be  opened,  connecting  all  circuits  to  a 
common  manifold.  This  interconnection  can  be  performed  manually 
by  the  crew;  however,  normally  the  GPC  will  automatically 
interconnect  the  circuits  just  before  the  start  of  the  MPS 
propellant  dump. 

3.1.4  Helium  Subsystem  Components 

The  helium  subsystem  contains  the  following  major  components. 

A.  Supply  Tank  - Each  engine  helium  supply  tank  cluster 
consists  of  two  4.7-ft3  supply  tanks  and  one  17.3-ft3 
supply  tank.  One  of  the  4.7-ft3  tanks  and  the  l7.3-ft3 
tank  are  located  in  the  mid-body  area  of  the  Shuttle 
under  the  payload  bay  liner,  in  an  area  originally 
reserved  for  additional  Power  Reactant  Supply  and 
Distribution  (PRSD)  cryogenic  storage.  The  17 . 3-ft3 
tank  is  identical  to  that  used  in  the  OMS.  The 
remaining  4.7-ft3  tank  is  located  in  the  rear  of  the 
Shuttle,  aft  of  the  payload  bay  bulkhead.  The  single 
4 . 7-ft3  pneumatic  helium  supply  tank  is  also  located  in 
this  area.  Prior  to  lift-off,  all  helium  supply  tanks 
will  be  pressurized  to  a nominal  value  of  4500  psia. 
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Figure  5 


HELIUM  SUBSYSTEM;  STORAGE  AND  REGULATION 
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Indicates  crew  has  manual  control  capability 
Interconnect 
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Figure  6A  - PNEUMATIC  HELIUM  DISTRIBUTION 
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Indicate!  crew  has  manual  control  capability. 

Controlled  by  LH2  INBOARD  FILL/DRAIN  valve 
switch  on  panel  R4. 


X 

Figure  6B  - PNEUMATIC  HELIUM  DISTRIBUTION 
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B.  Solenoid  Actuated  Valves  - All  of  the  valves  in  the 
helium  subsystem  are  spring-loaded  to  one  position  and 
electrically  actuated  to  the  other  position. 

Valve  position  is  controlled  via  electrical  signals 
from  either  the  GPCs  or  a manual  switch.  The  crew  can 
control  only  a portion  of  the  valves  through  cockpit 
switches,  the  remainder  are  controlled  automatically 
by  the  GPCs . 

C.  Supply  Tank  Isolation  Valves  - There  are  eight  supply 
tank  isolation  valves  in  the  helium  subsystem.  The 
valves  are  connected  in  parallel  to  each  engine  helium 
supply  tank  cluster  and  to  the  pneumatic  supply  tank  in 
pairs.  In  the  case  of  the  engine  helium  supply  tanks, 
each  pair  of  isolation  valves  control  helium  flow 
through  one  leg  of  a dual  helium  supply  regulator 
circuit.  Each  helium  supply  circuit  contains  two  check 
valves,  a filter,  an  isolation  valve,  a regulator,  and 
a relief  valve. 

The  two  isolation  valves  connected  to  the  pneumatic 
supply  tank  are  also  connected  in  parallel.  The  rest 
of  the  corresponding  helium  supply  circuit  consists  of 
a filter,  the  two  isolation  valves,  a regulator,  a 
relief  valve,  and  a single  check  valve. 

Each  isolation  valve  (with  the  exception  of  the  two 
pneumatic  helium  isolation  valves)  can  be  individually 
controlled  by  it's  own  cockpit  switch.  The  two 
pneumatic  helium  isolation  valves  are  controlled  by  a 
single  switch  on  Panel  R2. 

D.  interconnect  Valves  - Each  engine  helium  supply  tank 
cluster  has  two  interconnect  valves.  Each  valve  in  the 
pair  of  interconnect  valves  is  connected  in  series  with 
a check  valve.  Because  of  the  check  valves,  helium  can 
flow  through  the  interconnect  valves  in  one  direction 
only.  The  interconnect  valves  are  oriented  in  such  a 
manner  that  one  interconnect  valve  controls  helium  flow 
into  the  circuit  and  the  other  interconnect  valve 
controls  helium  flow  out  of  the  circuit.  The  "in” 
interconnect  valve  controls  He  flow  into  the  associated 
engine  helium  distribution  lines  from  the  pneumatic 
helium  supply  tank.  The  "out"  interconnect  valve 
controls  helium  flow  out  of  the  associated  engine 
helium  supply  tank  cluster  to  the  pneumatic  helium 
distribution  lines. 

Each  pair  of  interconnect  valves  (per  engine)  are 
controlled  by  a single  cockpit  switch.  This  switch  has 
three  positions:  IN  OPEN/OUT  CLOSE,  GPC,  and  IN 

CLOSE/OUT  OPEN,  with  the  switch  in  the  IN  OPEN/OUT 
CLOSE  position,  the  "in"  interconnect  valve  will  be 
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opened  and  the  "out"  interconnect  valve  closed.  The  IN 
CLOSE/OUT  OPEN  switch  position  will  do  the  reverse. 

With  the  switch  in  the  GPC  position,  both  valves  are 
closed  unless  commanded  to  the  open  position  by  the 
GPCs . In  the  event  of  an  RTLS  during  a normal  flight 
the  GPC  will  signal  the  "in"  interconnect  valve  to  open 
automatically  at  MECO  and  close  automatically  20 
seconds  later.  The  "out"  interconnect  valve  is  opened 
automatically  at  the  beginning  of  the  L02  dump  and 
closed  automatically  at  the  end  of  the  LH2  dump.  If  an 
engine  was  shut  down  prior  to  MECO,  however,  the 
corresponding  "in"  interconnect  valve  will  remain 
closed  at  MECO.  At  any  other  time,  placing  the  switch 
in  the  GPC  position  results  in  both  interconnect  valves 
closing  and  remaining  closed. 

There  is  an  additional  crossover  (interconnect)  valve 
connected  downstream  of  the  left  engine  helium  supply 
regulators  to  the  pneumatic  helium  distribution  system. 
In  the  event  of  a pneumatic  helium  regulator  failure 
(note  - only  one  regulator  in  this  line),  this  cross- 
over valve  would  be  opened,  the  pneumatic  helium 
isolation  valve  would  be  closed,  and  the  left  engine 
helium  supply  would  then  provide  regulated  helium 
pressure  through  the  crossover  valve  to  the  pneumatic 
helium  distribution  system.  This  crossover  valve  is 
controlled  by  it's  own  three-position  cockpit  switch. 
The  three  switch  positions  are  labeled  OPEN,  GPC,  and 
CLOSE . 

E.  Manifold  Pressurization  Valves  - (Figure  6A)  - The 
manifold  pressurization  valves  are  located  downstream 
of  the  pneumatic  helium  pressure  regulator  and  are  used 
to  control  the  flow  of  helium  to  the  propellant 
manifolds  during  nominal  propellant  dumps  and  manifold 
repressurization.  There  are  four  of  these  valves, 
grouped  in  pairs.  One  pair  of  valves  controls  helium 
pressure  to  the  L02  propellant  manifolds,  and  the  other 
pair  controls  helium  pressure  to  the  LH2  propellant 
manifolds. 

F.  LH2  RTLS  Dump  Pressurization  Valves  - (Fiqure  6B)  - The 
LH2  RTLS  dump  pressurization  valves  are  located  down- 
stream of  the  pneumatic  helium  pressure  regulator  and 
are  used  to  control  the  pressurization  of  the  LH2 
propellant  manifolds  during  an  RTLS  LH2  dump.  There 
are  two  of  these  valves,  connected  in  series.  Unlike 
the  LH2  manifold  pressurization  valves,  the  LH2  RTLS 
dump  pressurization  valves  cannot  be  controlled  from 
the  cockpit.  During  an  RTLS  abort,  valves  will  be 
opened  and  closed  automatically  by  GPC  commands. 
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One  additional  difference  between  the  nominal  and  the 
RTLS  LH2  dumps  is  in  the  routing  of  the  helium  and  the 
location  at  which  it  enters  the  LH2  feedline  manifold. 
For  the  nominal  LH2  dump,  helium  passes  through  the  LH2 
manifold  pressurization  valves  and  enters  the  feedline 
manifold  in  the  vicinity  of  the  LH2  feedline  disconnect 
valve.  For  the  RTLS  LH2  dump,  helium  passes  through 
the  LH2  RTLS  dump  pressurization  valves  and  enters  the 
feedline  manifold  in  the  vicinity  of  the  LH2  inboard 
fill/drain  valve  (on  the  inboard  side). 

G.  Pressure  Regulators  - Each  engine  helium  supply  tank 
cluster  has  two  pressure  regulators,  operating  in 
parallel.  Each  regulator  controls  pressure  in  one  leg 
of  a dual- redundant  helium  supply  circuit.  The 
pressure  regulators  for  the  helium  supply  tanks  are  set 
to  provide  outlet  pressures  in  the  range  of  715  psig  to 
770  psig.  Downstream  of  this  regulator  are  two  more 
regulators,  the  LH2  manifold  pressure  regulator  and  the 
L02  manifold  pressure  regulator.  These  regulators  are 
used  only  during  MPS  propellant  dump  and  manifold 
repressurization.  Both  regulators  are  set  to  provide 
outlet  pressures  in  the  range  of  20  to  25  psig.  Flow 
through  the  regulators  is  controlled  by  the  appropriate 
set  (2)  of  normally  closed  manifold  pressurization 
valves  (Figure  6). 

H.  Relief  Valves  - Downstream  of  each  pressure  regulator 
(with  the  exception  of  the  two  manifold  repress 
regulators)  is  a relief  valve.  The  purpose  of  the 
relief  valve  is  to  protect  the  downstream  helium 
distribution  lines  from  the  overpressurization  (and 
rupture)  in  the  event  the  associated  pressure  regulator 
fails  fully  open.  The  relief  valves  in  the  helium 
supply  circuits  are  set  to  relieve  at  825  +/-  25  psig 
and  reseat  at  785  psig. 

3.2  Interfaces  and  Locations 

The  MPS  system  hardware  is  located  in  the  aft  fuselage 
compartment  behind  the  payload  bay  but  forward  of  the  main 
engines.  The  MPS  system  interfaces  with  the  Orbiter's  three  main 
engines,  the  external  tank,  and  the  ground  during  prelaunch  and 
post  landing. 

3 . 3 Hierarchy 

Figure  2 illustrates  the  hierarchy  of  the  MPS  hardware 
components . 
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4.0  ANALYSIS  RESULTS 


Detailed  analysis  results  for  each  of  the  identified  failure 
modes  are  presented  in  Appendix  C.  Table  I presents  a summary  of 
the  failure  criticalities.  Further  discussion  of  each  of  these 
subdivisions  and  the  applicable  failure  modes  is  provided  in 
subsequent  paragraphs . 


TABLE  I Summary  of  IOA  Failure  Modes  and  Criticalities 


Criticality : 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

L02 

53 

61 

11 

56 

43 

39 

263 

LH2 

64 

30 

- 

25 

64 

183 

Helium 

12 

51 

19 

13 

27 

122 

244 

TOTAL 

129 

142 

30 

94 

70 

225 

690 

Of  these  690  failure  modes  analyzed,  349  were  determined  to  be 
PCIs.  A summary  of  the  PCIs  is  presented  in  Table  II.  Appendix 
D contains  a cross  reference  between  each  PCI  and  analysis  work- 
sheets in  Appendix  C. 


TABLE  II  Summary  of  IOA  Potential  Critical  Items  | 

Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

TOTAL 

L02 

53 

61 

11 

14 

7 

146 

LH2 

64 

30 

— 

11 



105 

Helium 

12 

51 

19 

- 

16 

98 

| TOTAL 

129  | 

1 142  | 

30  | 

1 25  | 

23  | 

349  | 

+ 

4.1  Analysis  Results  - Liquid  Oxygen  (L02) 

Failures  related  to  the  L02  components  were  analyzed.  Critical 
failures  were  due  to  external  leaks,  spontaneous  ignition  and 
mechanical  failures  of  valves. 

The  L02  components  were  individually  analyzed.  Critical  failures 
involved  the  loss  of  propellant  overboard,  fire  in  the  aft 
fuselage  and  fire/explosions  in  the  SSMEs.  The  L02  manifold 
repressurization  was  the  only  noncritical  failure  in  this  system. 
One  hundred  twenty-nine  (129)  failures  were  identified  to  be 
PCIs. 
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4.2  Analysis  Results  - Liquid  Hydrogen  ( LH2 ) 

Critical  failures  of  components  involved  line  ruptures  and  flow 
restrictions,  mechanical  and  electrical  failures  of  valves  and 
disconnects,  and  external  leakage.  One  hundred  five  (105) 
failures  were  identified  to  be  PCIs. 

4.3  Analysis  Results  - Helium 

Critical  failures  of  components  involved  mechanical  and 
electrical  failures  of  valves,  and  external  leakage.  Noncritical 
failures  involved  quick  disconnects'  inability  to  mate/demate, 
and  electrical  failures  of  valves.  Ninety-eight  (98)  failures 
were  identified  to  be  PCIs. 
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oo.  VO70-414548 , LH2  Pressurization  System  Test  Port 
Fittings,  3/25/76 

pp.  VO70-415468 , L02  Relief  System  Test  Port  Fitting, 

7/13/77 

qq.  V070-415552 , G02  Pressurization  Manifold  Orifice 
Assembly,  3/05/767 
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ACRONYMS 


AFV 

- 

Anti-Flood  Valve 

AS  I 

- 

Augmented  Spark  Igniter 

AT  VC 

- 

Ascent  Thrust  Vector  Control 

CCV 

- 

Chamber  Coolant  Valve 

CCVA 

- 

Chamber  Coolant  Valve  Assembly 

EIU 

- 

Engine  Interface  Unit 

EMR 

- 

Engine  Mixture  Ratio 

ET 

- 

External  Tank 

FBV 

- 

Fuel  Bleed  Valve 

FPB 

- 

Fuel  Preburner 

FPL 

- 

Full  Power  Level 

FPOV 

- 

Fuel  Preburner  Oxidizer  Valve 

GCV 

- 

Gaseous  Oxygen  Control  Valve 

GH2 

- 

Gaseous  Hydrogen 

GHe 

- 

Gaseous  Helium 

GN2 

- 

Gaseous  Nitrogen 

GND 

- 

Ground 

GO  2 

- 

Gaseous  Oxygen 

GSE 

- 

Ground  Support  Equipment 

H2 

- 

Hydrogen 

He 

- 

Helium 

HEX 

- 

Heat  Exchanger 

HGM 

- 

Hot  Gas  Manifold 

HPFT 

- 

High  Pressure  Fuel  Turbopump 

HPOT 

- 

High  Pressure  Oxidizer  Turbopump 

HPV 

- 

Helium  Precharge  Valve 

I/C 

- 

Interconnect 

ISP 

- 

Specific  Impulse 

LH2 

- 

Liquid  Hydrogen 

L02 

- 

Liquid  Oxygen 

LOX 

- 

Liquid  Oxygen 

LPFT 

- 

Low  Pressure  Fuel  Turbopump 

LPOT 

- 

Low  Pressure  Oxidizer  Turbopump 

LPS 

— 

Launch  Processor  System 
Launch  Processing  System 

MANF 

- 

Manifold 

MCC 

- 

Main  Combustion  Chamber 

ME 

- 

Main  Engine 

MEC 

- 

Master  Events  Controller 

MECO 

- 

Main  Engine  Cutoff 

MFV 

- 

Main  Fuel  Valve 

MOV 

- 

Main  Oxidizer  Valve 

MPL 

- 

Minimum  Power  Level 

MPS 

- 

Main  Propulsion  System 

MVA 

- 

Main  Valve  Actuator 

NC 

- 

Normally  Closed 

NO 

- 

Normally  Open 

NPSP 

- 

Net  Positive  Suction  Pressure 

OBV 

- 

Oxidizer  Bleed  Valve 

OPB 

- 

Oxidizer  Preburner 
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OPOV 

- 

Oxidizer  Preburner  Oxidizer  Valve 

PAV 

- 

Pressure  Actuated  Valve 

P/B 

- 

Preburner 

PBVA 

- 

Propellant  Bleed  Valve  Assembly 

Pc 

- 

Chamber  Pressure 

PCI 

- 

Potential  Critical  Item 

PCV 

- 

Purge  Check  Valves 

PMS 

- 

Propellant  Management  Subsystem 

POP 

- 

Preburner  Oxidizer  Pump 

RIV 

- 

Recirculation  Isolation  Valve 

RPC 

- 

Remote  Power  Controller 

RPL 

- 

Rated  Power  Level 

SRB 

- 

Solid  Rocket  Booster 

SSME 

- 

Space  Shuttle  Main  Engine 

SSMEC 

- 

SSME  Controller 
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APPENDIX  B 

DEFINITIONS,  GROUND  RULES,  AND  ASSUMPTIONS 


B.l  Definitions 

Definitions  contained  in  NSTS  22206,  Instructions  For  Preparation 
of  FMEA/CIL,  10  October  1986,  were  used  with  the  following 
amplifications  and  additions. 

INTACT  ABORT  DEFINITIONS : 

RTLS  - begins  at  transition  to  OPS  6 and  ends  at  transition 
to  OPS  9,  post-flight 

TAL  - begins  at  declaration  of  the  abort  and  ends  at 
transition  to  OPS  9,  post-flight 

AOA  - begins  at  declaration  of  the  abort  and  ends  at 
transition  to  OPS  9,  post-flight 

ATO  - begins  at  declaration  of  the  abort  and  ends  at 
transition  to  OPS  9,  post-flight 

CREDIBLE  (CAUSE)  - an  event  that  can  be  predicted  or  expected  in 
anticipated  operational  environmental  conditions.  Excludes  an 
event  where  multiple  failures  must  first  occur  to  result  in 
environmental  extremes 

CONTINGENCY  CREW  PROCEDURES  - procedures  that  are  utilized  beyond 
the  standard  malfunction  procedures,  pocket  checklists,  and  cue 
cards 

EARLY  MISSION  TERMINATION  - termination  of  onorbit  phase  prior  to 
planned  end  of  mission 

EFFECTS/RATIONALE  - description  of  the  case  which  generated  the 
highest  criticality 

HIGHEST  CRITICALITY  - the  highest  functional  criticality 
determined  in  the  phase-by-phase  analysis 

MAJOR  MODE  _£MM}_  - major  sub-mode  of  software  operational  sequence 
(OPS) 

MC  - Memory  Configuration  of  Primary  Avionics  Software  System 
(PASS) 

MISSION  - assigned  performance  of  a specific  Orbiter  flight  with 
payload/objective  accomplishments  including  orbit  phasing  and 
altitude  (excludes  secondary  payloads  such  as  GAS  cans, 
middeck  P/L,  etc.) 
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MULTIPLE  ORDER  FAILURE  - describes  the  failure  due  to  a single 
cause  or  event  of  all  units  which  perform  a necessary  (critical) 
function 

OFF-NOMINAL  CREW  PROCEDURES  - procedures  that  are  utilized  beyond 
the  standard  malfunction  procedures,  pocket  checklists,  and  cue 
cards 

OPS  - software  operational  sequence 

PRIMARY  MISSION  OBJECTIVES  - worst  case  primary  mission  objec- 
tives  are  equal  to  mission  objectives 

PHASE  DEFINITIONS : 

PRE LAUNCH  PHASE  - begins  at  launch  count -down  Orbiter 
power-up  and  ends  at  moding  to  OPS  Major  Mode  102  (liftoff) 

LIFTOFF  MISSION  PHASE  - begins  at  SRB  ignition  (MM  102)  and 
ends  at  transition  out  of  OPS  1 (Synonymous  with  ASCENT) 

ONORBIT  PHASE  - begins  at  transition  to  OPS  2 or  OPS  8 and 
ends  at  transition  out  of  OPS  2 or  OPS  8 

DEORBIT  PHASE  - begins  at  transition  to  OPS  Major  Mode 
301  and  ends  at  first  main  landing  gear  touchdown 

LANDING/SAFING  PHASE  - begins  at  first  main  gear 
touchdown  and  ends  with  the  completion  of  post-landing 
safing  operations 
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APPENDIX  B 

DEFINITIONS,  GROUND  RULES,  AND  ASSUMPTIONS 


B.2  IOA  Project  Level  Ground  Rules  and  Assumptions 

The  philosophy  embodied  in  NSTS  22206,  Instructions  for 
Preparation  of  FMEA/CIL,  10  October  1986,  was  employed  with  the 
following  amplifications  and  additions. 


1.  The  operational  flight  software  is  an  accurate 
implementation  of  the  Flight  System  Software  Requirements 
(FSSRs) . 

RATIONALE:  Software  verification  is  out-of-scope  of 
this  task. 

2.  After  liftoff,  any  parameter  which  is  monitored  by  system 
management  (SM)  or  which  drives  any  part  of  the  Caution  and 
Warning  System  (C&W)  will  support  passage  of  Redundancy 
Screen  B for  its  corresponding  hardware  item. 

RATIONALE:  Analysis  of  on-board  parameter  availability 
and/or  the  actual  monitoring  by  the  crew 
is  beyond  the  scope  of  this  task. 

3.  Any  data  employed  with  flight  software  is  assumed  to  be 
functional  for  the  specific  vehicle  and  specific  mission 
being  flown. 

RATIONALE:  Mission  data  verification  is  out-of-scope  of 
this  task. 

4.  All  hardware  (including  firmware)  is  manufactured  and 
assembled  to  the  design  specifications/drawings. 

RATIONALE:  Acceptance  and  verification  testing  is 

designed  to  detect  and  identify  problems 
before  the  item  is  approved  for  use. 

All  Flight  Data  File  crew  procedures  will  be  assumed 
performed  as  written,  and  will  not  include  human  error  in 
their  performance. 

RATIONALE:  Failures  caused  by  human  operational  error 
are  out-of -scope  of  this  task. 
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All  hardware  analyses  will,  as  a minimum,  be  performed  at 
the  level  of  analysis  existent  within  NASA/Prime  Contractor 
Orbiter  FMEA/CILs,  and  will  be  permitted  to  go  to  greater 
hardware  detail  levels  but  not  lesser. 

RATIONALE:  Comparison  of  IOA  analysis  results  with 

other  analyses  requires  that  both  analyses 
be  performed  to  a comparable  level  of 
detail . 

Verification  that  a telemetry  parameter  is  actually 
monitored  during  AOS  by  ground-based  personnel  is  not 
required. 

RATIONALE:  Analysis  of  mission-dependent  telemetry 

availability  and/or  the  actual  monitoring  of 
applicable  data  by  ground-based  personnel  is 
beyond  the  scope  of  this  task. 

The  determination  of  criticalities  per  phase  is  based  on  the 
worst  case  effect  of  a failure  for  the  phase  being  analyzed. 
The  failure  can  occur  in  the  phase  being  analyzed  or  in 
any  previous  phase,  whichever  produces  the  worst  case 
effects  for  the  phase  of  interest. 

RATIONALE:  Assigning  phase  criticalities  ensures  a 
thorough  and  complete  analysis. 

Analysis  of  wire  harnesses,  cables,  and  electrical  connectors 
to  determine  if  FMEAs  are  warranted  will  not  be  performed 
nor  FMEAs  assessed. 

RATIONALE:  Analysis  was  substantially  complete  prior 

to  NSTS  22206  ground  rule  redirection. 

Analysis  of  welds  or  brazed  joints  that  cannot  be  inspected 
will  not  be  performed  nor  FMEAs  assessed. 

RATIONALE:  Analysis  was  substantially  complete  prior 

to  NSTS  22206  ground  rule  redirection. 

Emergency  system  or  hardware  will  include  burst  discs  and 
will  exclude  the  EMU  Secondary  Oxygen  Pack  (SOP),  pressure 
relief  valves  and  the  landing  gear  pyrotechnics. 

RATIONALE:  Clarify  definition  of  emergency  systems  to 
ensure  consistency  throughout  IOA  project. 
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B . 3 SUBSYSTEM  SPECIFIC  GROUNDRULES  AND  ASSUMPTIONS 

The  IOA  was  performed  to  the  component/assembly  level  of  the 
subsystem  of  the  MPS.  The  analysis  considered  the  worst  case 
effects  of  the  hardware/functional  failure  on  the  subsystem, 
mission,  and  crew/vehicle  safety. 

1.  All  like  and  unlike  redundancy  will  be  considered  in 
determining  functional  criticality.  The  MPS  function 
is  to  provide  delta  V for  the  vehicle  to  reach  orbit. 
Since  loss  of  one  main  engine  during  the  early  part  of 
ascent  requires  a mission  abort,  any  failure  that 
results  in  the  loss  of  one  main  engine  will  be 
considered  loss  of  mission  (Crit  2).  Since,  for  most 
of  the  ascent,  two  engines  are  required  for  a 
successful  abort,  loss  of  two  or  three  engines  will  be 
considered  loss  of  life/vehicle  (Crit  1). 

RATIONALE:  These  failure  modes  are  directly  applicable 

to  worst  case  MPS  subsystem  component 
analyses . 

2.  Only  MPS  Orbiter  items  will  be  analyzed  for  the  MPS 
interface  to  the  Ground,  External  Tank,  and  the  Main 
Engines . 

RATIONALE:  Non-orbiter  program  hardware  are  not  within 

the  scope  of  this  task. 

3.  Aborts  are  assumed  to  be  caused  by  loss  of  an  engine. 
Any  failure  within  a component  that  can  shut  down  an 
engine  could  leave  only  one  engine  in  operation  and 
therefore  could  lead  to  loss  of  vehicle  (Crit  l). 

RATIONALE:  This  failure  mode  is  directly  applicable  to 

worst  case  MPS  subsystem  component 
analysis. 

4.  Undesignated  or  "Mil-Spec"  lines  in  the  MPS  system  will 
not  be  considered  as  failure  sources  except  at  unwelded 
component  joints.  The  components  will  be  identified 
from  generic  MPS  system  schematic  drawing(s)  VS70- 
41500X . The  component  connection  configurations 
(welded,  screwed,  flanged)  will  be  determined  from  the 
appropriate  RI  Specification  drawing.  Failure  modes  of 
the  unwelded  lines  will  not  be  considered,  unless 
different  from  the  failure  modes  of  the  component (s)  or 
system  to  which  they  are  attached. 

RATIONALE:  Undesignated  lines  do  not  have  any  reference 

documentation,  and  they  are  out  of  the 
scope  of  this  task. 
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APPENDIX  C 
DETAILED  ANALYSIS 


This  section  contains  the  IOA  analysis  worksheets  generated 
during  the  analysis  of  this  subsystem.  The  information  on  these 
worksheets  is  intentionally  similar  to  the  NASA  FMEAs.  Each  of 
these  sheets  identifies  the  hardware  item  being  analyzed,  and 
parent  assembly,  as  well  as  the  function.  For  each  failure  mode, 
the  possible  causes  are  outlined,  and  the  assessed  hardware  and 
functional  criticality  for  each  mission  phase  is  listed,  as 
described  in  the  NSTS  22206,  Instructions  for  Preparation  of  FMEA 
and  CIL,  10  October  1986.  Finally,  effects  are  entered  at  the 
bottom  of  each  sheet,  and  the  worst  case  criticality  is  entered 
at  the  top. 


LEGEND  FOR  IOA  ANALYSIS  WORKSHEETS 


Hardware  Criticalities: 

1 = Loss  of  life  or  vehicle 

2 = Loss  of  mission  or  next  failure  of  any  redundant  item 

(like  or  unlike)  could  cause  loss  of  life/vehicle 

3 = All  others 

Functional  Criticalities: 

1R  = Redundant  hardware  items  (like  or  unlike)  all  of  which, 
if  failed,  could  cause  loss  of  life  or  vehicle. 

2R  = Redundant  hardware  items  (like  or  unlike)  all  of  which, 
if  failed,  could  cause  loss  of  mission. 

Redundancy  Screen  A: 

1 = Is  Checked  Out  PreFlight 

2 * Is  Capable  of  Check  Out  PreFlight 

3 = Not  Capable  of  Check  Out  PreFlight 
NA  * Not  Applicable 

Redundancy  Screens  B and  C: 

P = Passed  Screen 
F * Failed  Screen 
NA  = Not  Applicable 


C-l 


APPENDIX  C 
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6011  - LH2  ELECTRICAL  WORKSHEETS  C-588 

7100  - HELIUM  ELECTRICAL  WORKSHEETS  C-649 
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INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1001 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  G02  PRESSURE  ISOLATION  CHECK  VALVE  (CV18,  19,  20) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  02  TANK  PRESS 

4)  G02  PRESSURE  ISOLATION  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0479-0003, 0023 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  VALVE  SUPPLIES  G02  FROM  A SSME  TO  PRESSURIZE  THE  ET  L02 
TANK.  THIS  ULLAGE  PRESSURE  IS  NECESSARY  FOR  EFFICIENT  OPERATION 
OF  THE  SSMES  (THE  PROPELLENT  WILL  RUN  OUT). 

THE  LOSS  OF  ALL  REDUNDANCY  DURING  AN  ABORT  WILL  RESULT  IN  THE 
LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
02004C 


REPORT  DATE  01/16/87 
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INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

1002 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  /NA 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


G02  PRESSURE  ISOLATION  CHECK  VALVE  (CV18,  19,  20) 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  GO 2 PRESSURE  ISOLATION  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


/NA 

/NA 

/NA 

/NA 

/NA 


RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0479-0003, 0023 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  VALVE  PREVENTS  THE  LOSS  OF  G02  USED  TO  PRESSURIZE  THE  ET  L02 
TANK  THROUGH  A SHUT  DOWN  SSME  (TWO  SSMES  RUNING  IS  AN  ABORT 
CASE).  THE  LOSS  OF  ULLAGE  PRESSURE  THROUGH  THIS  VALVE  CAN  CAUSE 
THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 
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INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1003 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


G02  PRESSURE  ISOLATION  CHECK  VALVE  (CV18,  19,  20) 
EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  G02  PRESSURE  ISOLATION  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0479-0003, 0023 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  VALVE  SUPPLIES  G02  FROM  A SSME  TO  PRESSURIZE  THE  ET  L02 
TANK* 

A GO 2 LEAK  IS  A FIRE/EXPLOSION  HAZARD  (LOSS  OF  VEHICLE). 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770?  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 
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INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/20/86 

MPS 

1004 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 


G02  PRESSURE  ISOLATION  CHECK  VALVE  (CV18,  19  20) 
FAILS  TO  CLOSE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

02  SUBSYSTEM 
L02  SSME  INTERFACE 
G02  PRESSURE  ISOLATION  CHECK  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

1/1 

/NA 

/NA 

/NA 

/NA 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0479-0003,0023 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

IF  THIS  VALVE  IS  OPEN  DURING  THE  PRELAUNCH  PHASE,  HELIUM  SUPPLIED 
FROM  THE  GROUND  TO  PRESSURIZE  THE  ET  L02  TANK  CAN  ENTER  THE  SSME 
AND  RUPTURE  THE  HEAT  EXCHANGER.  THE  RESULT  CAN  BE  A 
FIRE/EXPLOSION  IN  THE  SSME.  (LOSS  OF  VEHICLE) 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C7 


REPORT  DATE  01/16/87 


C-5 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

11/07/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

MPS 

FLIGHT: 

1/1 

MDAC  ID: 

1005 

ABORT: 

1/1 

ITEM: 

GO 2 PRESSURE 

ISOLATION  CHECK  VALVE  (CV18, 

19,  20) 

FAILURE  MODE:  FAILS  TO  OPEN 

, FAILS  TO  REMAIN  OPEN 

LEAD  ANALYST:  K.A.  HOLDEN 

SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02  SSME  INTERFACE 

4) 

G02  PRESSURE  ISOLATION  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC  ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0479-0003,0023 


CAUSES:  CONTAMINATION,  PIECE-PART  FAILURE 


EFFECTS/RATIONALE: 

THE  LAUNCH  WILL  BE  DELAYED  IF  THIS  VALVE  DOES  NOT  OPEN  BEFORE 
LIFTOFF. 

IF  THE  CHECK  VALVE  DOES  NOT  OPEN,  THE  PRESSURE  CAUSED  BY  THE 
TRAPPED  GO 2 WILL  RUPTURE  THE  HEAT  EXCHANGER.  THE  RESULT  CAN  BE  A 
FIRE/EXPLOSION  IN  THE  SSME.  (LOSS  OF  VEHICLE) 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770?  SEIFASSMEO  SD75-SH- 
0200C7 


REPORT  DATE  01/16/87 


C-6 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/20/86 

MPS 

1006 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  G02  PRESSURE  ISOLATION  CHECK  VALVE  (CV18,  19,  20) 

FAILURE  MODE:  SPONTANEOUS  IGNITION  IN/OF  PART 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  SSME  INTERFACE 

4)  G02  PRESSURE  ISOLATION  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0479-0003, 0023 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

A FIRE  CAN  BE  STARTED  BY  SPONTANEOUS  IGNITION  OF  A CONTAMINATE 
PARTICLE.  THE  IMPACT  OF  A CONTAMINATE  PARTICLE  CAN  SUPPLY  ENOUGH 
ENERGY  TO  START  THE  VALVE  ON  FIRE.  THIS  IS  A PURE  02  ATMOSPHERE 
EFFECT. 

THE  FIRE  COULD  SPREAD  CAUSING  A LARGER  FIRE/EXPLOSION  IN  THE 
SSME.  (LOSS  OF  VEHICLE) 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C;  PROBLEM  REPORT  NO  AC8335-01 


REPORT  DATE  01/16/87 


C-7 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1011 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  L02  TANK  PRE-PRESS  CHECK  VALVE  (CV16) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  L02  TANK  PRE-PRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

IF  THIS  CHECK  VALVE  FAILS  TO  OPEN  DURING  PRELAUNCH,  THE  ET  L02 
TANK  WILL  NOT  BE  PRESSURIZED.  THE  LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-8 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1012 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

2/1R 


ITEM:  L02  TANK  PRE-PRESS  CHECK  VALVE  (CV16) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED.  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02 

TANK 

PRESS 

4) 

L02 

TANK 

PRE-PRESS 

5) 

6) 

7) 

8) 

9) 

CHECK  VALVE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

ULLAGE  PRESSURE  IS  NECESSARY  FOR  EFFICIENT  OPERATION  OF  THE 
SSMES.  THE  LOSS  OF  ALL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  THE 
MISSION  (NOT  ENOUGH  PROPELLENT) . 

IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT,  THE  VEHICLE  WILL  BE  LOST. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-9 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1013 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM:  L02  TANK  PRE-PRESS  CHECK  VALVE  (CV16) 

FAILURE  MODE:  SPONTANEOUS  IGNITION  IN/OF  PART 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  L02  TANK  PRE-PRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 

CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

A FIRE  CAN  BE  STARTED  BY  SPONTANEOUS  IGNITION  OF  A CONTAMINATE 
PARTICLE.  THE  IMPACT  OF  A CONTAMINATE  PARTICLE  ON  THE  VALVE  CAN 
SUPPLY  ENOUGH  ENERGY  TO  START  THE  VALVE  ON  FIRE.  THIS  IS  A PURE 
02  ATMOSPHERE  EFFECT.  (FIRE  HAZARD) 

BURN  THROUGH  OF  THIS  VALVE  WILL  CAUSE  LOSS  OF  ULLAGE  PRESSURE. 
THE  PROPELLENT  WILL  RUN  OUT  (LESS  EFFICIENT  SSME  OPERATIONS). 

THE  VEHICLE  WILL  BE  LOST  IF  THIS  HAPPENS  DURING  AN  ABORT. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  NO  PROBLEM  REPORT  NO. 
AC8335-01;  SEIFASSMEO  SD75-SH-0200C 


REPORT  DATE  01/16/87 


C-10 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1014 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  TANK  PRE-PRESS  CHECK  VALVE  (CV16) 

FAILURE  MODE:  SPONTANEOUS  IGNITION  IN/OF  PART 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  SSME  INTERFACE 

4)  L02  TANK  PRE-PRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ S AFING : 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

A FIRE  CAN  BE  STARTED  BY  SPONTANEOUS  IGNITION  OF  A CONTAMINATE 
PARTICLE.  THE  IMPACT  OF  A CONTAMINATE  PARTICLE  ON  THE  VALVE  CAN 
SUPPLY  ENOUGH  ENERGY  TO  START  THE  VALVE  ON  FIRE.  THIS  IS  A PURE 
02  ATMOSPHERE  EFFECT. 

THE  VEHICLE  WILL  BE  LOST  IF  THE  FIRE  SPREADS  TO  A SSME.  CAUSING  A 
LARGER  FIRE/EXPLOSION. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  NO  PROBLEM  REPORT  NO. 
AC8335-01;  SEIFASSMEO  SD75-SH-0200C 


REPORT  DATE  01/16/87 


C-ll 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/07/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  1021  ABORT:  1/1 

ITEM:  L02  BLEED  CHECK  VALVE  (CV31,  33,  35) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  Pogo  SUPPRESSION 

4)  L02  BLEED  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0515-0002,0003 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THESE  VALVES  SUPPLY  L02  TO  THE  POGO  SUPPRESSION  SYSTEM. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  ON  ONE  OR  MORE  ENGINES 
COULD  RESULT  IN  STRUCTURAL  OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF 
UNPREDICTABLE  AMPLITUDE  WHICH  CAN  LEAD  TO  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-12 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1022 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  BLEED  CHECK  VALVE  (CV31,  33,  35) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02 

DUMP  & PURGE 

4) 

L02 

BLEED  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

2/1R 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


REDUNDANCY  SCREENS:  A[2]  B [ F ] C[P] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0515-0002, 0003 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  OF  THIS  VALVE  TO  OPEN  DURING  THE  DUMP  WILL  LEAVE  L02 
TRAPPED  IN  A SSME.  L02  TRAPPED  IN  TWO  OR  THREE  SSMES  WILL 
VIOLATE  THE  AFT  CG  LIMIT.  THEREFORE  LOSS  OF  ALL  REDUNDANCY  WILL 
RESULT  IN  LOSS  OF  THE  VEHICLE  DURING  LANDING. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-13 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1023 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  L02  BLEED  CHECK  VALVE  (CV31,  33,  35) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02 

SSME  INTERFACE 

4) 

L02 

BLEED  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0515-0002, 0003 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  OF  A L02  BLEED  CHECK  VALVE  WILL  CAUSE  L02  PUMP  CAVITATION 
LEADING  TO  SSME  SHUTDOWN. 

THE  LOSS  AF  ALL  REDUNDANCY  DURING  AN  ABORT  CAN  LEAD  TO  THE  LOSS 
OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-14 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

11/13/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

MPS 

FLIGHT: 

1/1 

MDAC  ID: 

1024 

ABORT: 

1/1 

ITEM: 

L02  BLEED 

CHECK  VALVE  (CV31,  33,  35) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02 

SSME  INTERFACE 

4) 

L02 

BLEED  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

1/1 

1/1 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0515-0002, 0003 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

A FAILURE  OF  THIS  VALVE  TO  REMAIN  CLOSED  DURING  ENGINE  OPERATION 
COULD  CAUSE  RUPTURE  OF  THE  ENGINE  AND/OR  ORBITER  L02  BLEED  LINE. 
THE  RESULTING  FIRE/EXPLOSION  WILL  DESTROY  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-15 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/10/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  /NA 

MDAC  ID:  1025  ABORT:  1/1 

ITEM:  L02  BLEED  CHECK  VALVE  (CV31,  33,  35) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROPELLENT  FEED 

4)  L02  BLEED  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

1/1 

LIFTOFF: 

/NA 

TAL: 

1/1 

ONORBIT: 

/NA 

AO  A: 

1/1 

DEORBIT: 

/NA 

ATO: 

1/1 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0515-0002, 0003 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  VALVE  PREVENTS  THE  LOSS  OF  L02  THROUGH  A SHUTDOWN  SSME  (TWO 
SSMES  RUNING  IS  AN  ABORT  CASE).  THIS  LOSS  OF  L02  CAN  CAUSE  THE 
LOSS  OF  THE  VEHICLE  (NOT  ENOUGH  PROPELLENT  TO  FINISH  THE  ABORT). 
THE  L02  LOST  THROUGH  THE  SHUTDOWN  SSME  IS  FROM  THE  POGO 
SUPPRESSION  SYSTEM.  FAILURE  OF  THIS  POGO  SUPPRESSION  SYSTEM  CAN 
ALSO  LEAD  TO  THE  DESTRUCTION  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-16 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1026 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  BLEED  CHECK  VALVE  (CV31,  33,  35) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  K«A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROPELLENT  FEED 

4)  L02  BLEED  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

2/2R 

TAL: 

2/1R 

ONORBIT: 

2/2R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0515-0002,0003 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  CASE  APPLIES  FROM  AFTER  MECO  AND  BEFORE  THE  MPS  DUMP.  THE 
UNLIKE  REDUNDANT  PART  IS  THE  PREVALVE  RELIEF  VALVE.  THE  LOSS  OF 
ALL  REDUNDANCY  MAY  CAUSE  THE  PROPELLENT  FEED  LINE  (BETWEEN  THE 
PREVALVE  AND  THE  SSME)  TO  RUPTURE. 

THE  RESULTING  OVERPRESSURIZATION  OF  THE  AFT  FUSELAGE  WILL  CAUSE 
THE  LOSS  OF  THE  MISSION  IN  THE  ONORBIT  MISSION  PHASES  AND  THE 
LOSS  OF  THE  VEHICLE  DURING  THE  DEORBIT  MISSION  PHASE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-17 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1027 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  L02  BLEED  CHECK  VALVE  (CV31,  33,  35) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 
LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  FILL  & DRAIN 

4)  L02  BLEED  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0515-0002, 0003 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  CHECK  VALVE  MUST  BE  CLOSED  PRIOR  TO  SSME  IGNITION.  FAILURE 
WILL  DELAY  THE  LAUNCH. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


# 


REPORT  DATE  01/16/87 


C-18 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/07/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1028 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  L02  BLEED  CHECK  VALVE  (CV31,  33,  35) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

FILL  & DRAIN 

4) 

L02  BLEED  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

/NA 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0515-0002,0003 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  CHECK  VALVE  MUST  BE  OPEN  TO  CHILLDOWN  THE 
PRELAUNCH.  FAILURE  WILL  DELAY  THE  LAUNCH. 


SSMES  DURING 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-19 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1031 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  G02  PRESSURE  FLOW  CONTROL  VALVE  (LV53,  54,  55) 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  G02  PRESSURE  FLOW  CONTROL  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC280-0017-0018, 0024, 0028 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

TWO  OF  THE  THREE  (ONE  FOR  EACH  SSME)  VALVES  ARE  NECESSARY  TO 
PRESSURIZE  THE  ET  L02  TANK.  THE  ET  L02  TANK  ULLAGE  PRESSURE  IS 
NECESSARY  FOR  EFFICIENT  OPERATION  OF  THE  SSMES  (NOT  ENOUGH 
PROPELLENT  TO  FINISH  THE  MISSION). 

FLOW  THROUGH  BOTH  ORIFICES  IS  NECESSARY  FOR  PROPER  OPERATION  OF 
THIS  VALVE.  CONTAMINATE  PARTICLES  CAN  CLOG  ONE  AND/OR  BOTH 
ORIFICES  IN  THIS  VALVE.  THE  LOSS  OF  ALL  REDUNDANCY  DURING  AN 
ABORT  CAN  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  MPS 
2102;  SEIFASSMEO  SD75-SH-0200C 


REPORT  DATE  01/16/87 


C-20 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1032 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

2/1R 


ITEM:  G02  PRESSURE  FLOW  CONTROL  VALVE  (LV53,  54,  55) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  G02  PRESSURE  FLOW  CONTROL  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC280-0017-0018, 0024, 0028 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

TWO  OF  THE  THREE  (ONE  FOR  EACH  SSME)  VALVES  ARE  NECESSARY  TO 
PRESSURIZE  THE  ET  L02  TANK.  THE  ET  L02  TANK  ULLAGE  PRESSURE  IS 
NECESSARY  FOR  EFFICIENT  OPERATION  OF  THE  SSMES. 

GO 2 FLOW  THROUGH  THIS  VALVE  IS  NECESSARY  TO  PRESSURIZE  THE  ET  L02 
TANK.  THE  LOSS  OF  ALL  REDUNDANCY  DURING  AN  ABORT  CAN  CAUSE  THE 
LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-21 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1033 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  G02  PRESSURE  FLOW  CONTROL  VALVE  (LV53,  54,  55) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  G02  PRESSURE  FLOW  CONTROL  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

c [ p ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC280-0017-0018, 0024, 0028 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  OF  THESE  VALVES  TO  CLOSE  COULD  OVERPRESSURIZE  THE  ET  L02 
TANK.  THE  ET  L02  TANK  FAILURE  WILL  CAUSE  THE  LOSS  OF  THE  VEHICLE 
IF  THE  ET  L02  TANK  PRESSURE  RELIEF  VALVES  ALSO  FAIL  (SECOND  ORDER 
FAILURE) . 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-22 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/13/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1034 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM:  G02  PRESSURE  FLOW  CONTROL  VALVE  (LV53,  54,  55) 

FAILURE  MODE:  SPONTANEOUS  IGNITION  IN/OF  PART 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02 

TANK  PRESS 

4) 

GO  2 

PRESSURE  FLOW 

5) 

6) 

7) 

8) 

9) 

CONTROL  VALVE 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/2 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC280-0017-0018, 0024, 0028 


CAUSES : CONTAM INATION 


EFFECTS/RATIONALE : 

A FIRE  CAN  BE  STARTED  BY  SPONTANEOUS  IGNITION  OF  A CONTAMINATE 
PARTICLE.  THE  IMPACT  OF  A CONTAMINATE  PARTICLE  ON  THE  VALVE  CAN 
SUPPLY  ENOUGH  ENERGY  TO  START  THE  VALVE  ON  FIRE.  THIS  IS  A PURE 
02  ATMOSPHERE  EFFECT.  (FIRE  HAZARD) 

BURN  THROUGH  OF  THIS  VALVE  WILL  CAUSE  THE  LOSS  OF  ULLAGE 
PRESSURE.  THE  PROPELLENT  CAN  RUN  OUT  (LESS  EFFICIENT  SSME 
OPERATIONS).  (LOSS  OF  VEHICLE  DURING  AN  ABORT) 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  MPS  2102;  SEIFASSMEO 
SD75-SH-0200C;  PROBLEM  REPORT  NO  AC8335-01 


REPORT  DATE  01/16/87 


C-23 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1035 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  G02  PRESSURE  FLOW  CONTROL  VALVE  (LV53,  54,  55) 

FAILURE  MODE:  SPONTANEOUS  IGNITION  IN/OF  PART 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  SSME  INTERFACE 

4)  G02  PRESSURE  FLOW  CONTROL  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC280-0017-0018, 0024, 0028 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

A FIRE  CAN  BE  STARTED  BY  SPONTANEOUS  IGNITION  OF  A CONTAMINATE 
PARTICLE.  THE  IMPACT  OF  A CONTAMINATE  PARTICLE  ON  THE  VALVE  CAN 
SUPPLY  ENOUGH  ENERGY  TO  START  THE  VALVE  ON  FIRE.  THIS  IS  A PURE 
02  ATMOSPHERE  EFFECT.  (FIRE  HAZARD) 

THE  VEHICLE  WILL  BE  LOST  IF  THE  FIRE  SPREADS  TO  A SSME  CAUSING  A 
LARGER  FIRE/EXPLOSION. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C;  PROBLEM  REPORT  NO  AC8335-01 


REPORT  DATE  01/16/87 


C-24 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
1/1 
/NA 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  FEED  (ORB/ET)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


DATE:  11/07/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1041 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  L02  FEED  (ORB/ET)  DISCONNECT  (PD1) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0511, 0521,  0161 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  VALVE  MUST  BE  OPEN  TO  LOAD  L02  INTO  THE  ET.  FAILURE  OF  THIS 
VALVE  WILL  PREVENT  THE  LOADING  OF  L02  INTO  THE  ET.  THE  SUDDEN 
CLOSING  OF  THIS  VALVE  DURING  FAST  FILL  WOULD  RESULT  IN  A PRESSURE 
SPIKE . 

THE  WORST  CASE  IS  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY  LINES. 
THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND  FIRE 
HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-25 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1042 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  /NA 


ITEM:  L02  FEED  (ORB/ET)  DISCONNECT  (PD1) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  FEED  (ORB/ET)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0511,0521,0161 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

L02  MUST  FLOW  THROUGH  THIS  DISCONNECT  FROM  THE  GROUND  TO  THE  ET. 
LEAKAGE  AT  THE  ORBITER/ET  INTERFACE  CAN  SPRAY  L02  ON  THE  ORBITER 
TPS,  DAMAGING  THE  TILES. 

LEAKAGE  INSIDE  THE  ORBITER  IS  A FIRE/ EXPLOSION  HAZARD  (LOSS  OF 
VEHICLE) . 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  V070-415203 


REPORT  DATE  01/16/87 


C-26 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1043 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  FEED  (ORB/ET)  DISCONNECT  (PD1) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  FEED  (ORB/ET)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0511, 0521, 0161 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

L02  MUST  FLOW  THROUGH  THIS  VALVE  TO  FEED  THE  SSMES.  THE  POSSIBLE 
RESULTS  OF  A FLOW  INTERRUPTION  INCLUDE  SSME  SHUT  DOWN, 

UNCONTAINED  SSME  DAMAGE  AND  FIRE/EXPLOSION. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-27 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1044 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  3/3 


ITEM:  L02  FEED  (ORB/ET)  DISCONNECT  (PD1) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  FEED  (ORB/ET)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

2/2 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0511,  0521, 0161 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  VALVE  IS  CLOSED  AFTER  MECO  TO  PREVENT  OUTGASSING  IN  THE 
ONORBIT  PHASE.  THIS  OUTGASSING  COULD  INTERFERE  WITH  THE 
OPERATION  OF  SOME  PAYLOADS.  THEREFORE  FAILURE  OF  THIS  VALVE  WILL 
CAUSE  THE  LOSS  OF  THE  MISSION. 

THIS  VALVE  IS  ALSO  CLOSED  TO  PREVENT  CONTAMINATION  OF  THE  MPS 
DURING/ AFTER  ENTRY. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-28 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1045 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  FEED  (ORB/ET)  DISCONNECT  (PD1) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  FEED  (ORB/ET)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0511, 0521, 0161 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LEAKING  L02  IS  A FIRE/EXPLOSION  HAZARD  (LOSS  OF  VEHICLE) . 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  V070-415203 


REPORT  DATE  01/16/87 


C-29 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1046 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  3/3 


ITEM:  L02  FEED  (ORB/ET)  DISCONNECT  (PD1) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  ET  INTERFACE 

4)  L02  FEED  (ORB/ET)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

2/2 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0511, 0521, 0161 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS /RATIONALE : 

THIS  VALVE  IS  CLOSED  FOR  ET  SEPARATION  TO  LIMIT  MOVEMENT  OF  THE 
ET  (CAUSED  BY  THE  BOILING  L02)  DURING  SEPARATION.  FAILURE  OF 
THIS  VALVE  WILL  DELAY  ET  SEPARATION  UNTIL  TANK  PRESSURE  HAS 
DECAYED  TO  SAFE  PRESSURE  LEVEL. 

OUTGASSING  COULD  INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 
THEREFORE  THIS  FAILURE  COULD  CAUSE  THE  LOSS  OF  MISSION. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770?  SEIFAETO  SD75-SH-0130 


REPORT  DATE  01/16/87 


C-30 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/07/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1051 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

/NA 


ITEM:  G02  PRESSURIZATION  (ORB/ET)  DISCONNECT  (PD4) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN,  EXTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  G02  PRESSURIZATION  (ORB/ET)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0391-0001 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  DISCONNECT  PASSES  GAS  (HE  FROM  GROUND  SUPPORT  AND  G02  FROM 
THE  SSME  HEAT  EXCHANGERS)  TO  PRESSURIZE  THE  ET  L02  TANK.  IF  THE 
ET  L02  TANK  IS  NOT  AT  THE  REQUIRED  ULLAGE  PRESSURE,  THE  LAUNCH 
WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-31 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1052 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/2 

1/1 


ITEM:  G02  PRESSURIZATION  (ORB/ET)  DISCONNECT  (PD4) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


MPS 

02  SUBSYSTEM 
L02  TANK  PRESS 

G02  PRESSURIZATION  (ORB/ET)  DISCONNECT 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

2/2 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0391-0001 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  DISCONNECT  PASSES  G02  TO  PRESSURIZE  THE  ET  L02  TANK.  THE  ET 
L02  TANK  ULLAGE  PRESSURE  IS  NECESSARY  FOR  EFFICIENT  OPERATION  OF 
THE  SSMES.  THIS  LOSS  OF  ULLAGE  PRESSURE  WILL  RESULT  IN  NOT 
ENOUGH  PROPELLENT  TO  FINISH  THE  MISSION. 

IF  THIS  FAILURE  OCCURS  DURING  THE  LIFTOFF  MISSION  PHASE,  THE 
MISSION  WILL  BE  LOST.  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT, 

THE  VEHICLE  MAY  BE  LOST. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-32 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1053 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  G02  PRESSURIZATION  (ORB/ET)  DISCONNECT  (PD4) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  G02  PRESSURIZATION  (ORB/ET)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 
LANDING/ SAFING : 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0391-0001 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  DISCONNECT  PASSES  G02  TO  PRESSURIZE  THE  ET  L02  TANK.  THE  ET 
L02  TANK  ULLAGE  PRESSURE  IS  NECESSARY  FOR  EFFICIENT  OPERATION  OF 
THE  SSMES  (NOT  ENOUGH  PROPELLENT  TO  FINISH  THE  MISSION). 

A L02  LEAK  IS  A FIRE/EXPLOSION  HAZARD  (LOSS  OF  VEHICLE) 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C;  V070-415404 


REPORT  DATE  01/16/87 


C-33 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1054 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


G02  PRESSURIZATION  (ORB/ET)  DISCONNECT  (PD4) 
SPONTANEOUS  IGNITION  IN/OF  PART 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

02  SUBSYSTEM 
L02  TANK  PRESS 

G02  PRESSURIZATION  (ORB/ET)  DISCONNECT 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


HDW/FUNC 

3/3 

2/2 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
MC2 84-03 9 1-0001 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

A FIRE  CAN  BE  STARTED  BY  SPONTANEOUS  IGNITION  OF  A CONTAMINATE 
PARTICLE.  THE  IMPACT  OF  A CONTAMINATE  PARTICLE  ON  THIS  PART  CAN 
SUPPLY  ENOUGH  ENERGY  TO  START  THE  PART  ON  FIRE.  THIS  IS  A PURE 
02  ATMOSPHERE  EFFECT.  (FIRE  HAZARD) 

THE  BURN  THROUGH  OF  THIS  VALVE  WILL  CAUSE  THE  LOSS  OF  THE  ET  L02 
TANK  ULLAGE  PRESSURE.  THE  PROPELLENT  WILL  RUN  OUT  (LESS 
EFFICIENT  SSME  OPERATIONS) . (LOSS  OF  VEHICLE  DURING  AN  ABORT) 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C;  PROBLEM  REPORT  NO.  AC8335-01 


REPORT  DATE  01/16/87 


C-34 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1055 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM: 

FAILURE  MODE: 


G02  PRESSURIZATION  (ORB/ET)  DISCONNECT  (PD4) 
SPONTANEOUS  IGNITION  IN/OF  PART 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  SSME  INTERFACE 

4)  G02  PRESSURIZATION  (ORB/ET)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0391-0001 


C [NA  ] 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

A FIRE  CAN  BE  STARTED  BY  SPONTANEOUS  IGNITION  OF  A CONTAMINATE 
PARTICLE.  THE  IMPACT  OF  A CONTAMINATE  PARTICLE  ON  THIS  PART  CAN 
SUPPLY  ENOUGH  ENERGY  TO  START  THE  PART  ON  FIRE.  THIS  IS  A PURE 
02  ATMOSPHERE  EFFECT. 

THE  VEHICLE  WILL  BE  LOST  IF  THE  FIRE  SPREADS  TO  A SSME  CAUSING  A 
LARGER  FIRE/EXPLOSION. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C;  PROBLEM  REPORT  NO.  AC8335-01 


REPORT  DATE  01/16/87 


C-35 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1056 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  G02  PRESSURIZATION  (ORB/ET)  DISCONNECT  (PD4) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  ET  INTERFACE 

4)  G02  PRESSURIZATION  (ORB/ET)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


HDW/FUNC 
/ NA 
3/3 
3/3 
3/3 
3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0391-0001 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  OF  THIS  VALVE  TO  CLOSE  WILL  RESULT  IN  CONTAMINATION  OF 
THE  MPS  DURING  THE  DEORBIT  AND  LANDING  MISSION  PHASES. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFAETO  SD75-SH-0130 


REPORT  DATE  01/16/87 


C-36 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1061 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  L02  TANK  PRE-PRESS  (ORB/GND)  DISC  (PD9) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN,  EXTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  FILL  & DRAIN 

4)  L02  TANK  PRE-PRESS  (ORB/GND)  DISC 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THE  ET  L02  TANK  IS  PRESSURIZED  WITH  GROUND  SUPPORT  HE  THROUGH 
THIS  DISCONNECT.  IF  THE  ET  L02  TANK  IS  NOT  PRESSURIZED,  THE 
LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-37 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1062 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  L02  TANK  PRE-PRESS  (ORB/GND)  DISC  (PD9) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  GROUND  INTERFACE 

4)  L02  TANK  PRE-PRESS  (ORB/GND)  DISC 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING : 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  CHECK  VALVE  PREVENTS  THE  LOSS  OF  THE  ET  L02  TANK  ULLAGE 
PRESSURE  THROUGH  THE  DISCONNECT.  THE  LAUNCH  WILL  BE  DELAYED  IF 
THE  ET  L02  TANK  PRESSURE  FALLS  BELOW  LIMITS. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-38 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1063 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  L02  TANK  PRE-PRESS  (ORB/GND)  DISC  (PD9) 

FAILURE  MODE:  FAILS  TO  REMAIN  CLOSED,  INTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  L02  TANK  PRE-PRESS  (ORB/GND)  DISC 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/2R 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THE  ET  L02  TANK  ULLAGE  PRESSURE  IS  NECESSARY  FOR  THE  EFFICIENT 

OPERATION  OF  THE  SSMES  (NOT  ENOUGH  PROPELLENT  LEFT  TO  FINISH  THE 
MISSION) • 

THE  IOSS  OF  ALL  REDUNDANCY  DURING  THE  LIFTOFF  MISSION  PHASE  WILL 
CAUSE  THE  LOSS  OF  THE  MISSION.  THE  LOSS  OF  ALL  REDUNDANCY  DURING 
AN  ABORT  MAY  CAUSE  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-39 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1064 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  TANK  PRE-PRESS  (ORB/GND)  DISC  (PD9) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  L02  TANK  PRE-PRESS  (ORB/GND)  DISC 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

2/1R 

2/1R 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

A G02  LEAK  IS  A FIRE/EXPLOSION  HAZARD  (IX)SS  OF  VEHICLE). 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-40 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/07/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1071 

ITEM:  L02  GROUND  FILL  & 

(PD12) 

FAILURE  MODE:  RESTRICTED  FLOW 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 

DRAIN  (ORB/GND)  DISCONNECT 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  GROUND  FILL  & DRAIN  (ORB/GND)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

/NA 

ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC274-0005-0012, 0032 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

L02  IS  LOADED  INTO  THE  ET  L02  TANK  THROUGH  THIS  DISCONNECT. 
LAUNCH  WILL  BE  DELAYED  IF  THE  L02  IS  NOT  LOADED. 


THE 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  V070-415703 


REPORT  DATE  01/16/87 


C-41 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1072 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

(PD12) 

FAILURE  MODE: 


L02  GROUND  FILL  & DRAIN  (ORB/GND)  DISCONNECT 
EXTERNAL  LEAKAGE  (ONTO  THE  ORBITER  SKIN) 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  GROUND  FILL  & 

5) 

6) 

7) 

8) 

9) 


DRAIN  (ORB/GND)  DISCONNECT 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC274-0005-0012,0032 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  AT  THE  GROUND/ ORBITER  INTERFACE  OF  THIS  DISCONNECT  CAN 
SPRAY  L02  ONTO  THE  ORBITER  TPS.  THIS  LEAKABE  WILL  CAUSE  THE 
LAUNCH  TO  BE  DELAYED  (POTENTIAL  DAMAGE  TO  TPS,  FIRE  HAZARD). 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  V070-415703 


REPORT  DATE  01/16/87 


C-42 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1073 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

/NA 


ITEM: 

(PD12) 

FAILURE  MODE: 
LEAD  ANALYST: 


L02  GROUND  FILL  & DRAIN  (ORB/GND)  DISCONNECT 
EXTERNAL  LEAKAGE  (INTO  AFT  FUSELAGE) 

K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  GROUND  FILL  & DRAIN  (ORB/GND)  DISCONNECT 

5) 

6) 

7) 

8) 

8) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC274-0005-0012,0032 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

SEAL  FAILURE  OF  THIS  DISCONNECT  WILL  SPRAY  L02  INTO  THE  AFT 
FUSELAGE.  THE  02  IS  A FIRE/ EXPLOSION  HAZARD.  THE  WORST  CASE  IS 
THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  V070-415703 


REPORT  DATE  01/16/87 


C-43 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1081 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

/NA 


ITEM:  L02  OVERBOARD  BLEED  (ORB/GND)  DISCONNECT  (PD13) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  OVERBOARD  BLEED  (ORB/GND)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0004-0001 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

L02  FLOWS  OUT  OF  THIS  DISCONNECT  DURING  THE  PRELAUNCH  SSME 
THERMAL  CONDITIONING.  SINCE  THIS  THERMAL  CONDITIONING  IS 
NECESSARY  FOR  SSME  IGNITION,  THIS  FAILURE  WILL  DELAY  THE  LAUNCH. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-44 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1082 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 


L02  OVERBOARD  BLEED  (ORB/GND)  DISCONNECT  (PD13) 
EXTERNAL  LEAKAGE  (ONTO  THE  ORBITER  SKIN) 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  OVERBOARD  BLEED  (ORB/GND)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0004-0001 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  AT  THE  GROUND/ORBITER  INTERFACE  OF  THIS  DISCONNECT  CAN 
SPRAY  L02  ONTO  THE  ORBITER  TPS.  THIS  LEAKAGE  WILL  CAUSE  THE 
LAUNCH  TO  BE  DELAYED  (POTENTIAL  DAMAGE  TO  TPS,  FIRE  HAZARD). 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-45 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1083 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  /NA 


ITEM:  L02  OVERBOARD  BLEED  (ORB/GND)  DISCONNECT  (PD13) 

FAILURE  MODE:  EXTERNAL  LEAKAGE  (INTO  AFT  FUSELAGE) 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  LQ2  FILL  & DRAIN 

4)  LQ2  OVERBOARD  BLEED  (ORB/GND)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0004-0001 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

SEAL  FAILURE  OF  THIS  DISCONNECT  WILL  SPRAY  L02  INTO  THE  AFT 
FUSELAGE.  THE  L02  IS  A FIRE/EXPLOSION  HAZARD. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C;  V070-415305 


REPORT  DATE  01/16/87 


C-46 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1084 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  L02  OVERBOARD  BLEED  (ORB/GND)  DISCONNECT  (PD13) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED.  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  OVERBOARD  BLEED  (ORB/GND)  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0004-0001 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  VALVE  PREVENTS  THE  VENTING  OVERBOARD  OF  THE  L02  FROM  THE 
SSME  BLEED  CHECK  VALVES.  THE  VENTING  OF  THIS  L02  MAY  NOT  LEAVE 
ENOUGH  PROPELLENT  TO  REACH  ORBIT. 

THE  LOSS  OF  ALL  REDUNDANCY  DURING  THE  LIFTOFF  MISSION  PHASE  WILL 
CAUSE  THE  LOSS  OF  THE  MISSION.  THE  LOSS  OF  ALL  REDUNDANCY  DURING 
AN  ABORT  MAY  CAUSE  THE  DESTRUCTION  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-47 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/07/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  2/^ 

MDAC  ID:  1085  ABORT:  2/1R 

ITEM:  L02  OVERBOARD  BLEED  (ORB/GND)  DISCONNECT  (PD13) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

POGO  SUPPRESSION 

4) 

L02  OVERBOARD  BLEED  (ORB/GND) 

DISCONNECT 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0004-0001 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  VALVE  PREVENTS  THE  VENTING  OVERBOARD  OF  THE  L02  (USED  IN  THE 
POGO  SUPPRESSION  SYSTEM)  FROM  THE  SSME  BLEED  CHECK  VALVES.  THIS 
LOSS  OF  THE  L02  WOULD  PREVENT  THE  PROPER  OPERATION  OF  THE  POGO 
SUPPRESSION  SYSTEM* 

THE  POGO  SUPPRESSION  SYSTEM  PREVENTS  THE  BUILDUP  OF  LOW  FREQUENCY 
OSCILLATIONS.  THE  LOSS  OF  ALL  REDUNDANCY  COULD  LEAD  TO  THE 
DESTRUCTION  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MPS  2102;  SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC- 
12770;  SEIFASSMEO  SD75-SH-0200C 


REPORT  DATE  01/16/87 


C-48 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/12/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1091 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 
1/1 
/ NA 


ITEM:  G02  PRESSURIZATION  MANIFOLD  TEST  POINT  COUPLING 

(PD15) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  G02  PRESSURIZATION  MANIFOLD  TEST  POINT  COUPLING 

5) 

«) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME276-0032-0017 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

A G02  LEAK  IS  A FIRE/EXPLOSION  HAZARD.  THE  WORST  CASE  IS  THE 
LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-49 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/07/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  1092  ABORT:  1/1 

ITEM:  G02  PRESSURIZATION  MANIFOLD  TEST  POINT  COUPLING 

(PD15) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  G02  PRESSURIZATION  MANIFOLD  TEST  POINT  COUPLING 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME276-0032-0017 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  AT  THIS  TEST  POINT  COUPLING  CAN  CAUSE  THE  LOSS  OF  THE  ET 
L02  TANK  ULLAGE  PRESSURE.  THIS  TANK  PRESSURE  IS  NECESSARY  FOR 
THE  EFFICIENT  OPERATION  OF  THE  SSMES  (NOT  ENOUGH  PROPELLENT  LEFT 
TO  FINISH  THE  MISSION). 

A G02  LEAK  IS  A FIRE/EXPLOSION  HAZARD.  THE  WORST  CASE  IS  THE 
LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-50 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

1093 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/2 

1/1 


ITEM:  G02  PRESSURIZATION  MANIFOLD  TEST  POINT  COUPLING 

(PD15) 

FAILURE  MODE:  SPONTANEOUS  IGNITION  IN/OF  PART 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  G02  PRESSURIZATION  MANIFOLD  TEST  POINT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/2 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME276-0032-0017 


C [NA  ] 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

A FIRE  CAN  BE  STARTED  BY  SPONTANEOUS  IGNITION  OF  A CONTAMINATE 
PARTICLE.  THE  IMPACT  OF  A CONTAMINATE  PARTICLE  ON  THIS  PART  CAN 
SUPPLY  ENOUGH  ENERGY  TO  START  THE  PART  ON  FIRE.  THIS  IS  A PURE 
02  ATMOSPHERE  EFFECT.  (FIRE  HAZARD) 

THE  BURN  THROUGH  OF  THIS  PART  WILL  CAUSE  THE  LOSS  OF  THE  ET  L02 
TANK  ULLAGE  PRESSURE.  THE  PROPELLENT  WILL  RUN  OUT  (LESS 
EFFICIENT  SSME  OPERATIONS).  (LOSS  OF  VEHICLE  DURING  AN  ABORT) 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770?  SEIFASSMEO  SD75-SH- 
0200C?  PROBLEM  REPORT  NO  AC8335-01 


REPORT  DATE  01/16/87 


C-51 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/07/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  1094  ABORT:  1/1 

ITEM:  G02  PRESSURIZATION  MANIFOLD  TEST  POINT  COUPLING 

(PD15) 

FAILURE  MODE:  SPONTANEOUS  IGNITION  IN/OF  PART 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  SSME  INTERFACE 

4)  G02  PRESSURIZATION  MANIFOLD  TEST  POINT  COUPLING 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME276-0032-0017 


CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

A FIRE  CAN  BE  STARTED  BY  SPONTANEOUS  IGNITION  OF  A CONTAMINATE 
PARTICLE.  THE  IMPACT  OF  A CONTAMINATE  PARTICLE  ON  THIS  PART  CAN 
SUPPLY  ENOUGH  ENERGY  TO  START  THE  PART  ON  FIRE.  THIS  IS  A PURE 
02  ATMOSPHERE  EFFECT. 

THE  VEHICLE  WILL  BE  LOST  IF  THE  FIRE  SPREADS  TO  A SSME  CAUSING  A 
LARGER  FIRE/EXPLOSION. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770?  SEIFASSMEO  SD75-SH- 
0200C?  PROBLEM  REPORT  NO  AC8335-01 


REPORT  DATE  01/16/87 


C-52 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/07/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1101 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  L02  PREVALVE  (PV1,  2,  3) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  PRE VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

/NA 

ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0005 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  PREVALVES  ARE  OPEN  DURING  THE  L02  LOADING  TO  THERMALLY 
CONDITION  THE  SSMES.  SINCE  THIS  THERMAL  CONDITIONING  IS 
NECESSARY  FOR  SSME  IGNITION,  THE  LAUNCH  WILL  BE  DELAYED  IF  THE 
PREVALVES  DO  NOT  OPEN. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-53 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/07/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  2/2 

MDAC  ID:  1102  ABORT:  1/1 

ITEM:  L02  PRE VALVE  (PV1,  2,  3) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  PRE  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0005 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  PREVALVE  MUST  BE  OPEN  FOR  SSME  OPERATION.  THE  PREMATURE 
CLOSURE  OF  A PREVALVE  WILL  SHUTDOWN  AND  POSSIBLY  DAMAGE  THE  SSME. 
IF  THIS  FAILURE  OCCURS  DURING  THE  LIFTOFF  MISSION  PHASE,  THE 
MISSION  WILL  BE  LOST.  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT, 

THE  VEHICLE  MAY  BE  LOST. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-54 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1103 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  PRE VALVE  (PV1,  2,  3) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02 

PROP  FEED 

4) 

L02 

PREVALVE 

5) 

6) 

7) 

8) 

9) 

FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0005 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

A L02  LEAK  IS  A FIRE/EXPLOSION  HAZARD. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-55 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1104 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  PRE VALVE  (PV1,  2,  3) 

FAILURE  MODE:  FAILS  TO  RELIEVE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  PRE  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

2/2R 

TAL: 

2/1R 

ONORBIT: 

2/2R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0005 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  CASE  IS  FOR  THE  TIME  AFTER  MECO  AND  BEFORE  THE  MPS  DUMP. 

THE  UNLIKE  REDUNDANT  PART  IS  THE  BLEED  CHECK  VALVE.  THE  LOSS  OF 
ALL  REDUNDANCY  MAY  CAUSE  THE  PROPELLENT  FEED  LINE  (BETWEEN  THE 
PREVALVE  AND  THE  SSME)  TO  RUPTURE. 

THE  RESULTING  OVERPRESSURIZATION  OF  THE  AFT  FUSELAGE  WILL  CAUSE 
THE  LOSS  OF  THE  MISSION  IN  THE  ONORBIT  MISSION  PHASES  AND  THE 
LOSS  OF  THE  VEHICLE  DURING  THE  DEORBIT  PHASE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-56 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1105 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  L02  PRE VALVE  (PV1,  2,  3) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  DUMP  & PURGE 

4)  L02  PRE  VALVE 

5) 

6) 

7) 

8) 

9) 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AO  A: 

DEORBIT: 

3/1R 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B[P]  C[P] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0005 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  PRE  VALVE  MUST  BE  OPEN  TO  DUMP  THE  L02  TRAPPED  IN  THE  LINES. 
THE  LOSS  OF  ALL  REDUNDANCY  ONORBIT  WILL  CAUSE  THE  LOSS  OF  THE 
MISSION  (OUTGASSING  MAY  INTERFERE  WITH  SOME  PAYLOADS). 

THE  AFT  CG  LIMIT  WILL  BE  VIOLATED  IF  THIS  PROPELLENT  IS  NOT 
DUMPED.  THEREFORE,  THE  LOSS  OF  ALL  REDUNDANCY  WILL  CAUSE  THE 
LOSS  OF  THE  VEHICLE  DURING  THE  DEORBIT  PHASE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-57 


c~^ 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/27/86 

MPS 

1106 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  PREVALVE  (PV1,  2,  3) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  DUMP  & PURGE 

4)  L02  PREVALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0005 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  PREVALVES  ARE  CLOSED  AFTER  THE  DUMP  TO  PREVENT  THE 
CONTAMINATION  OF  THE  MPS  DURING  AND  AFTER  REENTRY.  FAILURE  WILL 
NOT  HAVE  A SIGNIFICANT  EFFECT  ON  THE  VEHICLE  OR  MISSION. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-58 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/27/86 

MPS 

1107 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  PREVALVE  (PV1,  2,  3) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

SSME  INTERFACE 

4) 

L02  PREVALVE 

5) 

6) 

7) 

8) 

9) 

FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

1/1 

1/1 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0005 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  RESULTS  OF  A PREMATURE  PREVALVE  CLOSURE  MAY  INCLUDE  UPSTREAM 
FEEDLINE  RUPTURE  (CAUSED  BY  A EXCESSIVE  SYSTEM  PRESSURE  SURGE) 
UNCONTAINED  ENGINE  DAMAGE,  POSSIBLE  MULTIPLE  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  ' 

THE  WORST  CASE  RESULT  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-59 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/27/86 

MPS 

1108 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  L02  PREVALVE  (PV1,  2,  3) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  SSME  INTERFACE 

4)  L02  PRE VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0005 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  FAILURE  (CRITICAL  DURING  MECO)  WILL  CAUSE  A LOSS  OF  PRESSURE 
AT  THE  L02  PUMP  INLET.  THIS  COULD  CAUSE  A PUMP  OVERSPEED, 
UNCONTAINED  ENGINE  DAMAGE  AND/OR  EXPLOSION. 

THE  WORST  CASE  RESULT  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770?  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-60 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1121 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

/NA 


ITEM:  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0406-0001, 0002 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  VALVE  PREVENTS  THE  LOSS  OF  L02  FROM  THE  FEEDLINE  MANIFOLD. 
THE  FAILURE  OF  THIS  VALVE  WILL  DELAY  THE  LAUNCH. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-61 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1122 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

FAILURE  MODE:  FAILS  TO  REMAIN  CLOSED,  INTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0406-0001, 0002 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  LOSS  OF  ALL  REDUNDANCY  DURING  ASCENT  WILL  ALLOW  THE  VENTING 
OF  L02  THROUGH  THE  MANIFOLD  RELIEF  VALVE.  POSSIBLY  THERE  WILL 
NOT  BE  ENOUGH  PROPELLENT  TO  REACH  ORBIT. 

THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-62 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1123 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 
EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

2/2 

AO  A: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0406-0001,0002 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

EXTERNAL  LEAKAGE  OF  THIS  VALVE  WILL  SPRAY  L02  INTO  THE  AFT 
FUSELAGE.  THIS  L02  IS  A POTENTIAL  FIRE/EXPLOSION  HAZARD  DURING 
ASCENT.  THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASES 
(OUTGASSING  GO 2 COULD  INTERFERE  WITH  SOME  PAYLOADS). 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC- 19 041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-63 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1124 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  DUMP  & PURGE 

4)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

1/1 

LIFTOFF: 

3/3 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0406-0001, 0002 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  VALVE  TO  OPEN  AFTER  MECO  WILL  CAUSE  THE 
RUPTURE  OF  THE  L02  FEEDLINE  MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE 
OVERPRESSURIZED . 

THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASE  (OUTGASSING  G02 
CAN  INTERFERE  WITH  SOME  PAYLOADS).  THE  VEHICLE  COULD  BE 
DESTROYED  IN  THE  DEORBIT  PHASE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-64 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
1/1 
/NA 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1131 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


L02  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV9) 
FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0007, 0010, 0013 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

L02  FLOWS  THROUGH  THIS  VALVE  DURING  PROPELLENT  LOADING.  THE 
SUDDEN  CLOSING  OF  THIS  VALVE  DURING  FAST  FILL  WOULD  RESULT  IN  A 
PRESSURE  SPIKE. 

THE  WORST  CASE  IS  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY  LINES. 
THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND  FIRE 
HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-65 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1132 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  /NA 


ITEM:  L02  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV9) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA 

] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0007, 0010, 

0013 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  FAILURE  COULD  SPRAY  L02  INTO  THE  AFT  FUSELAGE.  THE  02  IS  A 
FIRE/EXPLOSION  HAZARD. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-66 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

1133 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  L02  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV9) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERIOR 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

/NA 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0007, 0010, 0013 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  VALVE  PROVIDES  A REDUNDANT  CLOSURE  OF  THE  L02  PROPELLENT 
FEED  MANIFOLD.  SINCE  IT  IS  NECESSARY  FOR  THIS  VALVE  TO  BE  CLOSED 
PRIOR  TO  LAUNCH,  THIS  FAILURE  WILL  CAUSE  THE  LAUNCH  TO  BE 
DELAYED. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-67 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1134 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  L02  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV9) 

FAILURE  MODE:  FAILS  TO  REMAIN  CLOSED,  INTERIOR  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0007, 0010, 0013 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  LOSS  OF  ALL  REDUNDANCY  WILL  ALLOW  THE  LOSS  OF  L02  THROUGH 
THIS  VALVE.  THIS  COULD  LEAVE  THE  VEHICLE  WITHOUT  ENOUGH 
PROPELLENT  TO  REACH  ORBIT. 

THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 

THE  VEHICLE  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC- 12 770 


REPORT  DATE  01/16/87 


C-68 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

2/1R 

2/1R 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1135 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


L02  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV9) 
EXTERIOR  LEAKAGE 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  2/1R  RTLS: 

LIFTOFF:  2/1R  TAL: 

ONORBIT:  3/3  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 


REDUNDANCY  SCREENS:  A [ 2 ] B [ 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0007, 0010,  0013 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


EFFECTS/RATIONALE : 

EXTERIOR  LEAKAGE  OF  THIS  VALVE  WILL  SPRAY  L02  INTO  THE  AFT 
FUSELAGE.  THERE  MAY  NOT  BE  ENOUGH  PROPELLENT  TO  REACH  ORBIT. 
THE  02  IS  A FIRE/EXPLOSION  HAZARD. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


mJ5!5NCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102* 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-69 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1136 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV9) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


MPS 

02  SUBSYSTEM 
L02  DUMP  & PURGE 

LQ2  OUTBOARD  FILL  AND  DRAIN  VALVE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

/NA 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0007, 0010, 0013 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  VALVE  OPENS  FOR  VACUUM  INERTING  TO  DUMP  ANY  REMAINING  L02 
TRAPPED  IN  THE  MPS.  THIS  FAILURE  WILL  NOT  CAUSE  THE  LOSS  OF  THE 
VEHICLE  OR  OF  THE  MISSION. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-70 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1137 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


L02  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV9) 

FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  DUMP  & PURGE 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  /NA  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/3  AO A: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING : 3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0007, 0010, 0013 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  VALVE  CLOSES  AFTER  VACUUM  INERTING  TO  PREVENT  THE 
CONTAMINAHON  OF  THE  MPS  DURING  REENTRY/LANDING.  THIS  FAILURE 
WILL  NOT  CAUSE  THE  LOSS  OF  THE  VEHICLE  OR  OF  THE  MISSION. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-71 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1151 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  /NA 


ITEM:  L02  INBOARD  FILL  AND  DRAIN  VALVE  (PV10) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC  ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] B [NA 

] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0008, 0011, 0014 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

L02  FLOWS  THROUGH  THIS  VALVE  DURING  PROPELLENT  LOADING.  THE 
SUDDEN  CLOSING  OF  THIS  VALVE  DURING  FAST  FILL  WOULD  RESULT  IN  A 
PRESSURE  SPIKE. 

THE  WORST  CASE  IS  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY  LINES. 
THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND  FIRE 
HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-72 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

11/12/86  HIGHEST  CRITICALITY 

Mps  FLIGHT: 

1152  ABORT: 

L02  INBOARD  FILL  AND  DRAIN  VALVE  (PV10) 
FAILURE  MODE:  EXTERIOR  LEAKAGE 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 


HDW/FUNC 

1/1 

/NA 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

ITEM: 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

1/1 

RTLS: 

/NA 

/NA 

TAL: 

/NA 

/NA 

AOA: 

/NA 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0008, 0011, 0014 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  FAILURE  COULD  SPRAY  L02  INTO  THE  AFT  FUSELAGE.  THIS  02  IS  A 
FIRE/EXPLOSION  HAZARD. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 
JSC-19041'*  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-73 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1153 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  L02  INBOARD  FILL  AND  DRAIN  VALVE  (PV10) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERIOR 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA 

] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0008, 0011, 

0014 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  VALVE  PROVIDES  A REDUNDANT  CLOSURE  OF  THE  L02  PROPELLENT 
FEED  MAINFOLD.  SINCE  IT  IS  NECESSARY  FOR  THIS  VALVE  TO  BE  CLOSED 
PRIOR  TO  LAUNCH,  THIS  FAILURE  WILL  CAUSE  THE  LAUNCH  TO  BE 
DELAYED. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-74 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1154 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  INBOARD  FILL  AND  DRAIN  VALVE  (PV10) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  DUMP  & PURGE 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

/NA 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0008, 0011, 0014 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  VALVE  OPENS  FOR  VACUUM  INERTING  TO  DUMP  ANY  REMAINING  L02 
TRAPPED  IN  THE  MPS.  THIS  FAILURE  WILL  NOT  CAUSE  THE  LOSS  OF  THE 
MISSION  AND/OR  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-75 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1155 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  INBOARD  FILL  AND  DRAIN  VALVE  (PV10) 

FAILURE  MODE:  FAILS  TO  REMAIN  CLOSED,  INTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

SSME  INTERFACE 

4) 

L02  OUTBOARD  FILL 

AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC  ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0008, 0011, 0014 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

OPENING  OF  THE  INBOARD  FILL  AND  DRAIN  VALVE  DURING  BOOST  WOULD 
ALLOW  A GAS  POCKET  TO  ENTER  THE  FEEDLINES  RESULTING  IN  POTENTIAL 
CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES. 

THE  POSSIBLE  RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN  (LOSS  OF 
VEHICLE) . 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770?  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-76 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1156 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


L02  INBOARD  FILL  AND  DRAIN  VALVE  (PV10) 
FAILS  TO  REMAIN  CLOSED,  INTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02 

PROP  FEED 

4) 

L02 

OUTBOARD  FILL 

5) 

6) 

7) 

8) 

9) 

AND  DRAIN  VALVE 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/2R 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

m rtl  m . - _ _ _ . _ 

PART  NUMBER:  MC284-0397-0008, 0011, 0014 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  LOSS  OF  ALL  REDUNDANCY  WILL  ALLOW  THE  LOSS  OF  L02  THROUGH 
THIS  VALVE.  THIS  COULD  LEAVE  THE  VEHICLE  WITHOUT  ENOUGH 
PROPELLENT  TO  REACH  ORBIT. 

THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 

THE  VEHICLE  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-77 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1157 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  INBOARD  FILL  AND  DRAIN  VALVE  (PV10) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  OUTBOARD  FILL  AND  DRAIN  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC  ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] B [NA 

] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0008, 0011, 0014 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

EXTERIOR  LEAKAGE  OF  THIS  VALVE  WILL  SPRAY  L02  INTO  THE  AFT 
FUSELAGE.  THERE  MAY  NOT  BE  ENOUGH  PROPELLENT  TO  REACH  ORBIT. 
THE  02  IS  A FIRE/EXPLOSION  HAZARD. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES  - VS70-41500X?  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-78 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1171 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  L02  BLEED  SHUTOFF  VALVE  (PV19) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02 

FILL  & DRAIN 

4) 

L02 

BLEED  SHUTOFF  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 
LANDING/ SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0035, 0045, 0055 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

L02  FLOWS  THROUGH  THIS  VALVE  AS  PART  OF  THE  PRELAUNCH  SSME 
THERMAL  CONDITIONING.  SINCE  THIS  THERMAL  CONDITIONING  IS 
NECESSARY  FOR  SSME  IGNITION,  THIS  FAILURE  WILL  CAUSE  THE  LAUNCH 
TO  BE  DELAYED. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-79 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1172 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


L02  BLEED  SHUTOFF  VALVE  (PV19) 

FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERIOR 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

02  SUBSYSTEM 
L02  FILL  & DRAIN 
L02  BLEED  SHUTOFF  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0035, 0045, 0055 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

SINCE  THIS  VALVE  PREVENTS  THE  VENTING  OVERBOARD  OF  THE  L02  FROM 
THE  SSME  BLEED  CHECK  VALVES,  IT  MUST  BE  CLOSED  PRIOR  TO  SSME 
IGNITION.  IF  THIS  VALVE  FAILS,  THE  LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-80 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1173 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

2/1R 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


L02  BLEED  SHUTOFF  VALVE  (PV19) 

FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERIOR 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  BLEED  SHUTOFF  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/2R 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B l P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0035, 0045, 0055 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  VALVE  PREVENTS  THE  VENTING  OVERBOARD  OF  THE  L02  FROM  THE 
SSME  BLEED  CHECK  VALVES.  THIS  FAILURE  MAY  NOT  LEAVE  ENOUGH 
PROPELLENT  TO  REACH  ORBIT. 

THE  LOSS  OF  ALL  REDUNDANCY  DURING  THE  LIFTOFF  MISSION  PHASE  WILL 
CAUSE  THE  LOSS  OF  THE  MISSION.  THE  LOSS  OF  ATT,  REDUNDANCY  DURING 
AN  ABORT  MAY  CAUSE  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-81 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
1/1 
1/1 

ITEM:  L02  BLEED  SHUTOFF  VALVE  (PV19) 

FAILURE  MODE:  EXTERIOR  LEAKAGE 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


DATE:  11/12/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1174 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


MPS 

02  SUBSYSTEM 

LQ2  PROP  FEED 

L02  BLEED  SHUTOFF  VALVE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

1/1 

1/1 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0035, 0045, 0055 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE:  mWil 

EXTERIOR  LEAKAGE  OF  THIS  VALVE  WILL  SPRAY  1X32  INTO  THE  AFT 
FUSELAGE.  THERE  MAY  NOT  BE  ENOUGH  PROPELLENT  TO  REACH  ORBIT. 
THE  02  IS  A FIRE/EXPLOSION  HAZARD. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-82 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
1/1 
1/1 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  BLEED  SHUTOFF  VALVE 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1175 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


L02  BLEED  SHUTOFF  VALVE  (PV19) 
FAILS  TO  RELIEVE 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

2/2 

TAL: 

ONORBIT: 

2/2 

AOA: 

DEORBIT: 

1/1 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0035, 0045, 0055 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

J2JSw«^LSLi?C°RP0RATES  A RELIEF  FUNCTION  (AFTER  MECO  AND  BEFORE 
THE  MPS  DUMP).  FAILURE  OF  THIS  PART  COULD  CAUSE  THE  RUPTURE  OF 
THE  LINE  BETWEEN  THE  SHUTOFF  AND  DISCONNECT  VALVES. 

THE  BOILING  OF  THE  L02  COULD  OVERPRESSURIZE  THE  AFT  FUSELAGE 
CAUSING  THE  LOSS  OF  THE  VEHICLE  DURING  REENTRY/ LANDING. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-83 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1176 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  BLEED  SHUTOFF  VALVE  (PV19) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CIX5SED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  POGO  SUPPRESSION 

4)  L02  BLEED  SHUTOFF  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

1/1 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0035, 0045, 0055 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS /RATIONALE l 

FAILURE  OF  THIS  VALVE  WOULD  STOP  THE  POGO  SUPPRESSION  SYSTEM. 
FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770?  SEIFASSMEO  SD75-SH- 


0200C 


REPORT  DATE  01/16/87 


C-84 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1181 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

21) 

FAILURE  MODE: 
LEAKAGE 


L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (PV20, 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  /NA  TAL: * 

ONORBIT:  /NA  AOA: 

DEORBIT:  /NA  ATO: 

LANDING/SAFING:  /NA 


HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0012, 0022, 0032, 0052 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THESE  VALVES  ARE  CLOSED  AS  PART  OF  THE  PRELAUNCH  SSME  THERMAL 

™2ITI0NING*  SINCE  raiS  THERMAL  CONDITIONING  IS  NECESSARY  FOR 
SSME  IGNITION,  THIS  FAILURE  WILL  DELAY  THE  LAUNCH. 


VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 
BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 

SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0 2 0 OC 


REPORT  DATE  01/16/87 


C-85 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1182 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (PV20, 

21) 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02 

FILL  & DRAIN 

4) 

L02 

POGO  ACCUMULATOR 

5) 

6) 

7) 

8) 

9) 

RECIRCULATION  VALVE 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0012, 

0022,0032,0052 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THESE  VALVES  ARE  OPENED  JUST  PRIOR  TO  SSME  IGNITION.  SINCE  BOTH 
VALVES  MUST  BE  OPEN  FOR  THE  OPERATION  OF  THE  POGO  SUPRESSION 
SYSTEM,  THE  FAILURE  OF  EITHER  VALVE  WILL  DELAY  THE  LAUNCH. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-86 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1183 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (PV20, 
EXTERIOR  LEAKAGE 
LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


ITEM: 

21) 

FAILURE  MODE: 


BREAKDOWN  HIERARCHY: 

1)  MPS 

02  SUBSYSTEM 
L02  PROP  FEED 

L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

1/1 

1/1 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0012, 0022,0032,0052 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

EXTERIOR  LEAKAGE  OF  THIS  VALVE  WILL  SPRAY  L02  INTO  THE  AFT 
FUSELAGE.  THERE  MAY  NOT  BE  ENOUGH  PROPELLENT  LEFT  TO  REACH 
ORBIT.  THE  02  IS  A FIRE/EXPLOSION  HAZARD. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSDy  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
020  OC 


REPORT  DATE  01/16/87 


C-87 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1184 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

21) 

FAILURE  MODE: 


L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (PV20, 
FAILS  TO  RELIEVE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  SSME  INTERFACE 

4)  L02  POGO  ACCUMULATOR 

5) 

6) 

7) 

8) 

9) 


RECIRCULATION  VALVE 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  /NA  RTLS: 

LIFTOFF:  3/2R  TAL: 

ONORBIT:  3/3  AOA: 

DEORBIT:  2/1R  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0012,0022, 0032, 0052 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE:  

THESE  VALVES  INCORPORATE  A RELIEF  FUNCTION  TO  PREVENT  THE  RUPTURE 
OF  THE  L02  FEEDLINE  (FOR  THE  TIME  AFTER  MECO  AND  BEFORE  THE  MPS 


uyjrur  ) • 

THE  CONSEQUENCES  INCLUDE  FIRE/EXPLOSION  HAZARD  AND 
OVERPRESSURIZATION  OF  THE  AFT  FUSELAGE.  THIS  COULD 
LOSS  OF  THE  VEHICLE  DURING  REENTRY/ LANDING. 


RESULT  IN  THE 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
0200C 


REPORT  DATE  01/16/87 


C-88 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1185 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM: 

21) 

FAILURE  MODE: 


L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (PV20, 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  POGO  SUPPRESSION 

4)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  2/1R  RTLS: 

LIFTOFF:  2/1R  TAL: 

ONORBIT:  3/3  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/S AFING:  3/3 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0012, 0022,0032,0052 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  CONTAMINATION , PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

oDPT3?mr^ESE  VALVES  MUST  BE  OPEN  FOR  THE  POGO  SUPPRESSION  SYSTEM 
UrLKATION • 


THE  FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN 

0SILIATI0NS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE 
AMPLITUDE  WHICH  CAN  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


^t«^NCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770;  SEIFASSMEO  SD75-SH- 
02  00C 


REPORT  DATE  01/16/87 


C-89 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1191 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  L02  LOW  LEVEL  LIQUID  SENSOR  (MT1,  2) 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (FALSE  WET) 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  LOW  LEVEL  LIQUID  SENSOR 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/1R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC432-0205-0022 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  VIBRATION 


EFFECTS/RATIONALE : 

FALSE  WET  SENSOR  READINGS  COULD  ALLOW  THE  SSMES  BURN  UNTIL  ALL 
THE  PROPELLENT  IS  USED.  THE  POSSIBLE  RESULTS  OF  A SSME  RUNNING 
DRY  INCLUDE  UNCONTAINED  ENGINE  DAMAGE  AND  FIRE/EXPLOSION. 

THE  LOSS  OF  ALL  REDUNDANCY  COULD  CAUSE  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-90 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

1192 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


L02  LOW  LEVEL  LIQUID  SENSOR  (MT1,  2) 
ERRONEOUS  OUTPUT  (FALSE  DRY) 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  LOW  LEVEL  LIQUID  SENSOR 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC432-0205-0022 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  CONTAMINATION , PIECE-PART  STRUCTURAL  FAILURE,  VIBRATION 


EFFECTS/RATIONALE : 

iro^r«o«Y^SENS0R  READIMGS  COULD  PREMATURELY  SHUT  DOWN  THE  SSMES. 
THE  LOSS  OF  ALL  REDUNDANCY  WILL  CAUSE  THE  LOSS  OF  THE  VEHICLE. 


m^^NCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

B?IEFS  JSC-19041'*  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-91 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1201 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 


L02  SYSTEM  DELTA  P TRANSDUCER  (MT44,  50) 
ERRONEOUS  INDICATION 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  SYSTEM  DELTA 

5) 

6) 

7) 

8) 

9) 


P TRANSDUCER 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC449-0164-0001 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  COMPONENT  PROVIDES  AN  INDIRECT  MEASURE  OF  THE  PROPELLENT 
LEVEL  IN  THE  ET  L02  TANK.  THE  FAILURE  OF  THIS  COMPONENT  WILL 
DELAY  THE  LAUNCH. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-92 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1202 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  SYSTEM  DELTA  P TRANSDUCER  (MT44,  50) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  TANK  PRESS 

4)  L02  SYSTEM  DELTA  P TRANSDUCER 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC449-0164-0001 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  CONTAMINATION , PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

A L02  LEAK  IS  A POTENTIAL  FIRE/EXPLOSION  HAZARD. 
THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-93 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/14/86 

MPS 

1211 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  L02  PREPRESS  DISCONNECT  CHECK  VALVE  TEST  PORT 

(TP9) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02  TANK  PRESS 

4) 

L02  PREPRESS  DISCONNECT  CHECK  VALVE 

TEST 

PORT 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC  ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415446-001 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LEAKAGE  THROUGH  THIS  TEST  PORT  COULD  CAUSE  A LOSS  OF  ET  L02  TANK 
ULLAGE  PRESSURE.  BECAUSE  OF  THE  LESS  EFFICIENT  SSME  OPERATIONS, 
THERE  WILL  NOT  BE  ENOUGH  PROPELLENT  TO  FINISH  THE  MISSION.  THE 
VEHICLE  MAY  BE  LOST  DURING  AN  ABORT. 

AN  02  LEAK  IS  A POTENTIAL  FIRE/EXPLOSION  HAZARD.  THE  WORST  CASE 
IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-94 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

1221 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  17  INCH  ORBITER  DISCONNECT  TEST  PORT  (TP17, 

18) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROPELLENT  FEED 

4)  L02  17  INCH  ORBITER  DISCONNECT  TEST  PORT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0501,  0521 


CAUSES:  CONTAMINATION , PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

A L02  LEAK  IS  A POTENTIAL  FIRE/EXPLOSION  HAZARD. 
THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-95 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/14/86 

MPS 

1231 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


L02  FEEDLINE  RELIEF  TEST  PORT  (TP24) 
EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

02  SUBSYSTEM 
L02  PROPELLENT  FEED 
L02  FEEDLINE  RELIEF  TEST  PORT 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
V07 0-4 154 68 -001 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

A L02  LEAK  IS  A POTENTIAL  FIRE/EXPIOSION  HAZARD. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-96 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/14/86 

MPS 

1241 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  FEEDLINE  MANIFOLD  (MAI) 

FAILURE  MODE:  BLOCKED  FLOW 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  FEEDLINE  MANIFOLD 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

1/1 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0074-0005 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK 
(PRELAUNCH)  AND  FROM  THE  ET  L02  TANK  TO  THE  SSMES  (LIFTOFF). 

THE  POSSIBLE  EFFECTS  OF  BLOCKED  FLOW  INCLUDE  PREMATURE  SSME  SHUT 
DOWN,  UNCONTAINED  SSME  DAMAGE  AND  FIRE/EXPLOSION.  THE  WORST  CASE 
IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-97 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
1/1 
1/1 

ITEM:  L02  FEEDLINE  MANIFOLD  (MAI) 

FAILURE  MODE:  RUPTURE 


DATE:  11/14/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1242 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02  PROP  FEED 

4) 

L02  FEEDLINE  MANIFOLD 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

2/2 

AOA: 

DEORBIT: 

1/1 

ATO: 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0074-0005 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS /RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK 
(PRELAUNCH)  AND  FROM  THE  ET  L02  TANK  TO  THE  SSMES  (LIFTOFF) . 

THE  SSMES  WILL  BE  SHUT  DOWN.  L02  FROM  THIS  RUPTURED  LINE  IS  A 
FIRE/EXPLOSION  HAZARD.  BOILING  OF  THE  L02  CAN  OVERPRESSURIZE  AND 
THUS  DESTROY  THE  AFT  FUSELAGE.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-98 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/14/86 

MPS 

1243 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  FEEDLINE  MANIFOLD  (MAI) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  FEEDLINE  MANIFOLD 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

1/1 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0074-0005 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  CONTAMINATION , PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK 
(PRELAUNCH)  AND  FROM  THE  ET  L02  TANK  TO  THE  SSMES  (LIFTOFF) 

THE  LEAKING  L02  IS  A POTENTIAL  FIRE/EXPLOSION  HAZARD.  THE  WORST 
CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-99 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
3/3 
3/3 

ITEM:  L02  FEEDLINE  MANIFOLD  (MAI) 

FAILURE  MODE:  LOSS  OF  INSULATION 


DATE:  11/14/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1244 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  FEEDLINE  MANIFOLD 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0074-0005 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK 
(PRELAUNCH)  AND  FROM  THE  ET  L02  TANK  TO  THE  SSMES  (LIFTOFF) . 

THE  FAILURE  OF  INSULATION  ON  THIS  LINE  WILL  PREVENT  THE  PRELAUNCH 
PROPELLENT  THERMAL  CONDITIONING.  THIS  FAILURE  WILL  DELAY  THE 
LAUNCH. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-100 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/14/86 

MPS 

1251 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


iTEM:  L02  FILL  & DRAIN  LINE  (FH1) 

FAILURE  MODE:  BLOCKED  FLOW 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  FILL  & DRAIN  LINE 

5) 

6) 

7) 

8) 

9) 


HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


C [NA  ] 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRE  LAUNCH : 3/3  RTLS : 

LIFTOFF:  /NA  TAL: ’ 

ONORBIT:  /NA  AOA: 

DEORBIT:  /NA  ATO: 

LANDING/SAFING:  /NA 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0076-0002, 0012 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02 
IS  NOT  IN  USE  DURING  FLIGHT. 

THE  L02  WILL  NOT  BE  LOADED  INTO  THE  ET  L02  TANK  IF  THIC 
BLOCKED.  THIS  FAILURE  WILL  DELAY  THE  LAUNCH. 


TANK.  IT 
LINE  IS 


VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 
?ujIE.FS^.JSC~19041?  MAIN  PR°PULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-101 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
1/1 
/NA 

ITEM:  L02  FILL  & DRAIN  LINE  (FH1) 

FAILURE  MODE:  RUPTURE 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


DATE:  11/14/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1252 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  FILL  & DRAIN  LINE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0076-0002,0012 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK.  IT 
IS  NOT  IN  USE  DURING  FLIGHT. 

L02  FROM  THIS  RUPTURED  LINE  IS  A POTENTIAL  FIRE/EXPLOSION  HAZARD. 
THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-102 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/14/86 

MPS 

1253 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  /NA 


ITEM:  L02  FILL  & DRAIN  LINE  (FH1) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  FILL  & DRAIN  LINE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0076-0002, 0012 


CAUSES:  CONTAMINATION , PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK.  IT 
IS  NOT  IN  USE  DURING  FLIGHT. 

THE  LEAKING  L02  IS  A POTENTIAL  FIRE/EXPLOSION  HAZARD.  THE  WORST 
CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-103 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
3/3 
/NA 

ITEM:  L02  FILL  & DRAIN  LINE  (FH1) 

FAILURE  MODE:  LOSS  OF  INSULATION 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  FILL  & DRAIN 

4)  L02  FILL  & DRAIN  LINE 

5) 

6) 

7) 

8) 

9) 


DATE:  11/14/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1254 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0076-0002, 0012 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK.  IT 
IS  NOT  IN  USE  DURING  FLIGHT. 

THE  FAILURE  OF  INSULATION  ON  THIS  LINE  WILL  PREVENT  THE  PRELAUNCH 
THERMAL  CONDITIONING  OF  THE  PROPELLENT.  THIS  FAILURE  WILL  DELAY 
THE  LAUNCH. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-104 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
1/1 
1/1 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

1261 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


L02  17  INCH  FEEDLINE  (FH2) 
BLOCKED  FLOW 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  17  INCH  FEEDLINE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC274-0074-0001,0201 

CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK 
(PRELAUNCH)  AND  FROM  THE  ET  L02  TANK  TO  THE  SSMES  (LIFTOFF) . 

THE  POSSIBLE  EFFECTS  OF  BLOCKED  FLOW  INCLUDE  PREMATURE  SSME 
SHUTDOWN,  UNCONTAINED  SSME  DAMAGE  AND  FIRE/EXPLOSION.  THE  WORST 
CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-105 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

1262 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  17  INCH  FEEDLINE  (FH2) 

FAILURE  MODE:  RUPTURE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.,  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


MPS 

02  SUBSYSTEM 

L02  PROP  FEED 

L02  17  INCH  FEEDLINE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

1/1 

1/1 

2/2 

1/1 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC274-0074-0001, 0201 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK 
(PRELAUNCH)  AND  FROM  THE  ET  L02  TANK  TO  THE  SSMES  (LIFTOFF). 

THE  SSMES  WILL  BE  SHUT  DOWN.  L02  FROM  THIS  RUPTURED  LINE  IS  A 
FIRE/EXPLOSION  HAZARD.  BOILING  OF  THE  L02  CAN  OVERPRESSURIZE  AND 
THUS  DESTROY  THE  AFT  FUSELAGE.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-106 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

1263 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


L02  17  INCH  FEEDLINE  (FH2) 
EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

02  SUBSYSTEM 
L02  PROP  FEED 
L02  17  INCH  FEEDLINE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

1/1 

1/1 

TAL: 

1/1 

3/3 

AOA: 

1/1 

3/3 

3/3 

ATO: 

1/1 

A [NA  ] 

B [NA  ] 

C [NA  ] 

CRITICALITIES 

FLIGHT  PHASE 
PRELAUNCH: 

LIFTOFF: 

ONORBIT: 

DEORBIT: 

LANDING/SAFING: 

REDUNDANCY  SCREENS: 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC274-0074-0001,0201 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK 
(PRELAUNCH)  AND  FROM  THE  ET  L02  TANK  TO  THE  SSMES  (LIFTOFF) 

THE  LEAKING  L02  IS  A POTENTIAL  FIRE/EXPLOSION  HAZARD.  THE  WORST 
CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X?  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-107 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
3/3 
3/3 

ITEM:  L02  17  INCH  FEEDLINE  (FH2) 

FAILURE  MODE:  LOSS  OF  INSULATION 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


DATE:  11/17/86 

SUBSYSTEM:  MPS 

MDAC  ID:  1264 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02  PROP  FEED 

4) 

L02  17  INCH  FEEDLINE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC274-0074-0001, 0201 


CAUSES:  CONTAMINATION,  PIECE -PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  GROUND  TO  THE  ET  L02  TANK 
(PRELAUNCH)  AND  FROM  THE  ET  L02  TANK  TO  THE  SSMES  (LIFTOFF) . 

THE  FAILURE  OF  INSULATION  ON  THIS  LINE  WILL  PREVENT  THE  PRELAUNCH 
PROPELLENT  THERMAL  CONDITIONING.  THIS  FAILURE  WILL  DELAY  THE 
LAUNCH. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-108 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
1/1 
1/1 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  12  INCH  FEEDLINE 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

1271 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


L02  12  INCH  FEEDLINE  (FH3.  4.  5) 
BLOCKED  FLOW 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

1/1 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC274-0074-0202, 0302 

CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  17  INCH  FEEDLINE  TO  A SSME. 

EFpECTS  OF  BLOCKED  FLOW  IN  THIS  LINE  INCLUDE 
PREMATURE  SSME  SHUTDOWN,  UNCONTAINED  SSME  DAMAGE  AND 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE 


VS70-41500X;  SSSH  DWG  10.11;  OMRSD?  BOOSTER  SYSTEM 
JSC”19041?  main  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-109 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

1272 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  12  INCH  FEEDLINE  (FH3,  4,  5) 

FAILURE  MODE:  RUPTURE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  12  INCH  FEEDLINE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC274-0074-0202,0302 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  17  INCH  FEEDLINE  TO  A SSME. 

A SSME  WILL  BE  SHUTDOWN.  L02  FROM  THIS  RUPTURED  LINE  IS  A 
FIRE/EXPLOSION  HAZARD.  BOILING  OF  THE  L02  CAN  OVERPRESSURIZE  AND 
THUS  DESTROY  THE  AFT  FUSELAGE.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-110 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 

BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

02  SUBSYSTEM 

3) 

L02  PROP  FEED 

4) 

L02  12  INCH  FEEDLINE 

5) 

6) 

7) 

8) 

9) 

11/17/86 

MPS 

1273 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


L02  12  INCH  FEEDLINE  (FH3,  4.  5) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC274-0074-0202, 0302 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  LINE  TRANSPORTS  L02  FROM  THE  17  INCH  FEEDLINE  TO  A SSME 
THE  LEAKING  L02  IS  A POTENTIAL  FIRE/EXPLOSION  HAZARD.  THE  WORST 
CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-lll 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/18/86 

MPS 

1281 


HIGHEST  CRITICALITY  HDW/FUNC 


FLIGHT: 

ABORT: 


2/1R 

2/1R 


ITEM:  L02  FEED  MANIFOLD  RELIEF  VALVE  (RV5) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  FEED  MANIFOLD  RELIEF  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

c [ p ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0501-0001 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

EXTERNAL  LEAKAGE  OF  THIS  VALVE  WILL  SPRAY  L02  INTO  THE  AFT 
FUSELAGE.  THIS  L02  IS  A POTENTIAL  FIRE/EXPLOSION  HAZARD  DURING 
ASCENT. 

THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-112 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/18/86 

MPS 

1282 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  L02  FEED  MANIFOLD  RELIEF  VALVE  (RV5) 

FAILURE  MODE:  FAILS  TO  REMAIN  CLOSED,  INTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  L02  FEED  MANIFOLD  RELIEF  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0501-0001 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  LOSS  OF  ALL  REDUNDANCY  DURING  ASCENT  WILL  ALLOW  THE  VENTING 
OF  L02  THROUGH  THIS  VALVE.  POSSIBLY  THERE  WILL  NOT  BE  ENOUGH 
PROPELLENT  TO  REACH  ORBIT. 

THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11;  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102; 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-113 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/18/86 

MPS 

1283 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  FEED  MANIFOLD  RELIEF  VALVE  (RV5) 

FAILURE  MODE:  FAILS  TO  RELIEVE 


LEAD  ANALYST:  K.A.  HOLDEN  SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  DUMP  & PURGE 

4)  L02  FEED  MANIFOLD  RELIEF  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

2/2 

AOA: 

DEORBIT: 

1/1 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0501-0001 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  VALVE  RELIEVES  PRESSURE  IN  THE  L02  FEEDLINE  MANIFOLD  AFTER 
MECO.  THE  L02  FEEDLINE  MANIFOLD  WILL  RUPTURE  IF  ALL  REDUNDANCY 
IS  LOST. 

THE  AFT  FUSELAGE  IS  OVERPRESSURIZED.  THE  MISSION  IS  LOST  IN  THE 
ONORBIT  MISSION  PHASE  (OUTGASSING  G02  CAN  INTERFERE  WITH  SOME 
PAYLOAD).  THE  VEHICLE  COULD  BE  DESTROYED  IN  THE  DEORBIT  PHASE 
(LOSS  OF  VEHICLE). 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD?  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-114 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/19/86 

MPS 

1291 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  G02  PRESSURE  MANIFOLD  REPRESS  ORIFICE  (RP1) 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  DUMP  & PURGE 

4)  G02  PRESSURE  MANIFOLD  REPRESS  ORIFICE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

/NA 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415552-001 

CAUSES:  CONTAMINATION , PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  ORIFICE  PASSES  HELIUM  FROM  THE  PNEUMATIC  HELIUM  SUPPLY 
SYSTEM  INTO  THE  G02  LINES  TO  REPRESSURIZE  THESE  LINES  PRIOR  TO 
REENTRY. 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  THE  CONTAMINATION  OF  THE  MPS 
BY  THE  ATMOSPHERE  DURING  REENTRY.  THIS  WILL  NOT  CAUSE  THE  LOSS 
OF  THE  VEHICLE  OR  OF  THE  MISSION. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041;  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-115 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/19/86 

MPS 

1292 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  G02  PRESSURE  MANIFOLD  REPRESS  ORIFICE  (RP1) 

FAILURE  MODE:  INTERNAL  LEAKAGE 


LEAD  ANALYST:  K.A.  HOLDEN 


SUBSYS  LEAD:  A.J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  02  SUBSYSTEM 

3)  L02  PROP  FEED 

4)  G02  PRESSURE  MANIFOLD  REPRESS  ORIFICE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415552-001 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

THIS  ORIFICE  (AND  CHECK  VALVE  CV12)  PREVENTS  THE  BLEEDING  OF  L02 
FROM  THE  17  INCH  L02  FEEDLINE  INTO  THE  GO 2 (ET  L02  TANK  ULLAGE 
PRESSURE)  SYSTEM. 

THE  LOSS  OF  ALL  REDUNDANCY  WILL  NOT  CAUSE  THE  LOSS  OF  THE  VEHICLE 
OR  OF  THE  MISSION. 


REFERENCES:  VS70-41500X;  SSSH  DWG  10.11?  OMRSD;  BOOSTER  SYSTEM 

BRIEFS  JSC-19041?  MAIN  PROPULSION  SYSTEM  WORKBOOK  MPS  2102? 
SHUTTLE  FLIGHT  OPERATIONS  MANUAL  JSC-12770 


REPORT  DATE  01/16/87 


C-116 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  9/17/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2001 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  3/1R 


ITEM:  LH2  INBOARD  FILL  AND  DRAIN  VALVE  (PV12) 

FAILURE  MODE:  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  INBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

INABILITY  TO  FILL  LH2  TANK  WILL  CAUSE  LAUNCH  DELAY.  FAILURE 
DURING  TANK  FILL  MAY  CAUSE  RUPTURE  OF  FILL  LINE,  RELEASING  LH2 
AND  CREATING  A FIRE/EXPLOSION  HAZARD.  INABILITY  TO  DUMP  RESIDUAL 
LH2  WOULD  ALLOW  HYDROGEN  TO  MIX  WITH  ATMOSPHERIC  OXYGEN  DURING 
ENTRY  OR  ON  THE  GROUND,  FORMING  AN  EXPLOSIVE  MIXTURE.  VALVE  IS 
NOT  REQUIRED  TO  OPEN  DURING  RTLS.  VACUUM  INERTING  PROCEDURE 
SERVES  AS  A REDUNDANCY. 


REFERENCES:  JSC-19041,  BOOSTER  SYSTEMS  BRIEFS;  VS70-41500X 


REPORT  DATE  01/16/87 


C-117 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/07/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2002  ABORT:  1/1 

ITEM:  LH2  INBOARD  FILL  AND  DRAIN  VALVE  (PV12) 

FAILURE  MODE:  FAIL  TO  REMAIN  CLOSED 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  INBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 

CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

PREIGNITION  FAILURE  WILL  CAUSE  LAUNCH  DELAY,  OR,  IF  ALL 
REDUNDANCY  FAILS,  THE  VEHICLE  CAN  BE  DESTROYED  BY  FIRE/EXPLOSION 
OF  ESCAPING  LH2.  FAILURE  AFTER  ENGINE  START  WILL  ALLOW  A GAS 
POCKET  TO  ENTER  THE  FEEDLINE,  RESULTING  IN  ENGINE  PUMP  CAVITATION 
AND  EXPLOSION  OF  THE  ENGINE (S).  IF  THE  O/B  VALVE  ALSO  FAILS,  LH2 
WILL  ESCAPE  THE  VEHICLE,  RESULTING  IN  A LOW  LEVEL  SHUTDOWN  BEFORE 
GUIDANCE  INITIATED  MECO  AND/OR  CREATION  OF  AN  EXPLOSIVE  MIXTURE 
OF  H2  AND  ATMOSPHERIC  02  OUTSIDE  THE  VEHICLE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-118 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  9/25/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2003 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  LH2  INBOARD  FILL  AND  DRAIN  VALVE  (PV12) 

FAILURE  MODE:  FAIL  TO  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  INBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/3 

3/1R 

3/1R 


RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 


HDW/FUNC 

/NA 

3/1R 

3/1R 

3/1R 


c [ p ] 


CAUSES:  CONTAMINATION,  BINDING,  PEICE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

INABILITY  TO  FILL  TANK  WILL  CAUSE  LAUNCH  DELAY.  NO  REDUNDANCY 
FOR  PRELAUNCH  PHASE.  LOSS  OF  ALL  REDUNDANCY  WOULD  MAKE  DUMPING 
LH2  RESIDUALS  IMPOSSIBLE.  VENTING  H2  GAS  COULD  CREATE  AN 
EXPLOSIVE  MIXTURE  WITH  ATMOSPHERIC  02  DURING  DEORBIT  AND 
LANDING.  THE  VALVE  IS  NOT  REQUIRED  TO  OPEN  DURING  RTLS. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-119 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  9/26/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2004 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  LH2  INBOARD  FILL  AND  DRAIN  VALVE  (PV12) 

FAILURE  MODE:  FAIL  TO  CLOSE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  INBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/1R 

3/1R 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

/NA 

3/1R 

3/1R 

3/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 

CAUSES:  CONTAMINATION,  BINDING,  PEICE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAIL  TO  CLOSE  PRELAUNCH  WOULD  CAUSE  LAUNCH  DELAY.  FAILURE  TO 
CLOSE  6 SEC  AFTER  MPS  DUMP  START  WOULD  ALLOW  H2  TO  FREEZE  IN  THE 
FILL  AND  DRAIN  LINE,  PREVENTING  A NORMAL  DUMP.  NO  REDUNDANCY  TO 
PREVENT  FREEZE-UP,  BUT  ALTERNATE  PATHS  EXIST  TO  DUMP 
REMAINING  LIQUID  H2.  LOSS  OF  REDUNDANCY  WOULD  TRAP  H2,  WHICH 
COULD  ESCAPE  DURING  ENTRY  AND  LANDING  TO  CREATE  AN  EXPLOSIVE 
MIXTURE  WITH  ATMOSPHERIC  OXYGEN. 


REFERENCES:  JSC-19041;  BOOSTER  SYSTEMS  BRIEFS,  VS70-41500X 


REPORT  DATE  01/16/87 


C-120 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


9/26/86 

MPS 

2005 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


LH2  INBOARD  FILL  AND  DRAIN  VALVE  (PV12) 
FAIL  TO  RELIEVE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  FILL  AND  DRAIN  SUBSYSTEM 
LH2  INBOARD  FILL  AND  DRAIN  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


1/1 

1/1 

/NA 

/NA 

/NA 


RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
MC2 8 4 -03 97 -0015 


CAUSES:  CONTAMINATION,  BINDING 

EFFECTS/RATIONALE : 

FAILURE  TO  RELIEVE  WILL  ALLOW  PRESSURE  BUILDUP  FROM  BOILOFF  OF 
RESIDUAL  LH2.  EFFECT  OF  THIS  FAILURE  IS  POSSIBLE  RUPTURE  OF  LH2 
FILL  LINE.  MPS  DUMP  WILL  RELIEVE  ANY  PRESSURE  BUILDUP.  FAILURE 
MODE  IS  NA  AFTER  MPS  INERTING  SINCE  THE  VALVE  IS  THEN  LEFT 

OPEN  FOR  THE  REMAINDER  OF  THE  FLIGHT.  NO  REDUNDANCY  FOR  THIS 
MODE . 


REFERENCES:  JSC-19041;  BOOSTER  SYSTEMS  BRIEFS;  MC271-0076 


REPORT  DATE  01/16/87 


C-121 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  9/26/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2006 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  INBOARD  FILL  AND  DRAIN  VALVE  (PV12) 

FAILURE  MODE:  ERRONEOUS  INDICATION 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  INBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 

CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURE 

FAILURE 


EFFECTS/RATIONALE : 

LAUNCH  MAY  BE  DELAYED  IF  INDICATOR  FAILS  PRELAUNCH.  FAILURE 
AFTER  LIFTOFF  IS  CRIT  3.  LH2  MANIFOLD  PRESSURE  TRANSDUCER  COULD 
BE  CONSIDERED  REDUNDANT  FOR  SOME  PORTIONS  OF  FLIGHT  SUCH  AS  MPS 
VACUUM  INERTING.  LEVEL  SENSORS  ARE  A REDUNDANCY  FOR 
PRELAUNCH. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-122 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM:  MPS 

MDAC  ID:  2007 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  INBOARD  FILL  AND  DRAIN  VALVE  (PV12) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  INBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PROCEDURAL  ERROR,  PIECE- 

PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  IS  A FIRE/EXPLOSION  HAZARD  ON  THE  PAD  AND  WHILE 
STILL  IN  THE  ATMOSPHERE  DURING  POWERED  FLIGHT.  NO  HAZARD  AFTER 
MPS  DUMP  AND  PURGE. 


REFERENCES:  V070-415702 


REPORT  DATE  01/16/87 


C-123 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/06/86 

MPS 

2011 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV11) 

FAILURE  MODE:  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  OUTBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FU1 

PRELAUNCH: 

1/1 

RTLS: 

/NA 

LIFTOFF: 

3/3 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 

CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

INABILITY  TO  FILL  TANK  WILL  CAUSE  LAUNCH  DELAY.  FAILURE  DURING 
TANK  FILL  MAY  CAUSE  RUPTURE  OF  FILL  LINE,  RELEASING  LH2  AND 
CREATING  A FIRE/EXPLOSION  HAZARD.  INABILITY  TO  DUMP  RESIDUAL  LH2 
WOULD  ALLOW  VENTING  GH2  TO  COMBINE  WITH  ATMOSPHERIC  OXYGEN  AND 
CREATE  AN  EXPLOSIVE  MIXTURE  DURING  ENTRY  AND  LANDING. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-124 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/06/86 

MPS 

2012 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


LH2  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV11) 
FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  FILL  AND  DRAIN  SUBSYSTEM 
LH2  OUTBOARD  FILL  AND  DRAIN  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

2/1R 

RTLS 

2/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY.  LOSS  OF  REDUNDANCY 
DURING  PRELAUNCH  WILL  ALLOW  LH2  TO  FLOW  OUT  THE  FILL  LINE, 
CREATING  A FIRE/ EXPLOSION  HAZARD.  SECOND  FAILURE  DURING  POWERED 
FLIGHT  (LOSS  OF  ALL  REDUNDANCY)  WILL  ALLOW  LH2  TO  ESCAPE, 

CAUSING  ENGINE  SHUTDOWN  PRIOR  TO  GUIDANCE  INITIATED  MECO. 

INBOARD  VALVE  HAS  POSITION  INDICATOR  SO  LOSS  OF  REDUNDANCY  IS 
READILY  DETECTABLE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-125 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/06/86 

MPS 

2013 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV11) 

FAILURE  MODE:  FAIL  TO  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  OUTBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/3 

1/1 


RTLS: 
TAL: 
AO  A: 
ATO: 


LANDING/SAFING:  1/1 

REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] 


HDW/FUNC 

/NA 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 

CAUSES:  CONTAMINATION,  BINDING,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS /RATIONALE ! 

INABILITY  TO  FILL  TANK  WILL  CAUSE  LAUNCH  DELAY.  INABILITY  TO 
DUMP  RESIDUAL  LH2  WOULD  ALLOW  GH2  VENTING  DURING  ENTRY  AND 
LANDING  TO  CREATE  AN  EXPLOSIVE  MIXTURE  WITH  ATMOSPHERIC  02.  THE 
VALVE  IS  NOT  REQUIRED  TO  OPEN  DURING  AN  RTLS. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-126 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
2/1R 


LEAD  ANALYST:  W.J.MCNICQLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  OUTBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/06/86 

MPS 

2014 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


LH2  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV11) 
FAIL  TO  CLOSE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 


HDW/FUNC 

/NA 

2/1R 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION , BINDING,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY.  LOSS  OF  REDUNDANCY  OR 
FAILURE  DURING  TAL  WILL  ALLOW  H2  TO  CONTINUE  ESCAPING  THE 
VEHICLE,  COMBINE  WITH  ATMOSPHERIC  OXYGEN  AND  CREATE  A 
FIRE/EXPLOSION  HAZARD.  NORMAL  TAL  DUMP  IS  ONLY  A PARTIAL  ONE 
MSS  OF  REDUNDANCY  IS  READILY  DETECTABLE  VIA  VALVE  POSItToN 
INDICATORS.  THE  VALVE  DOES  NOT  OPEN  DURING  RTLS. 


REFERENCES:  JSC-19041 


REPORT  DATE  01/16/87 


C-127 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/06/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  2015  ABORT:  3/3 

ITEM:  LH2  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV11) 

FAILURE  MODE:  ERRONEOUS  INDICATION 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  OUTBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY.  THIS  FUNCTION  CAN  BE 
CONSIDERED  TO  HAVE  REDUNDANCY  FOR  SOME  FLIGHT  PHASES  OR  EVENTS. 
IF  THE  LEVEL  SENSORS  INDICATE  THE  LH2  TANK  IS  FILLING,  THE  VALVE 
IS  SURELY  OPEN.  IF  LH2  MANIFOLD  PRESSURE  DROPS  DURING 
SCHEDULED  TIME  FOR  LH2  DUMP,  THE  VALVE  MUST  BE  OPEN.  NO 
REDUNDANCY  FOR  MAIN  ENGINE  ASCENT  PHASE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-128 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/06/86 

MPS 

2016 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  OUTBOARD  FILL  AND  DRAIN  VALVE  (PV11) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  OUTBOARD  FILL  AND  DRAIN  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0397-0015 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PROCEDURAL  ERROR,  PIECE- 

PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  CAN  LEAD  TO  A FIRE  OR  EXPLOSION  DURING  POWERED 
FLIGHT  OR  WHILE  STILL  ON  THE  PAD.  NO  HAZARD  AFTER  MPS  DUMP  AND 
PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-129 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/08/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2021  ABORT:  1/1 

ITEM:  LH2  FILL  AND  DRAIN  LINE  (FH6) 

FAILURE  MODE:  RUPTURE 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  FILL  AND  DRAIN  LINE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0076-0021 


CAUSES:  OVERPRESSURIZATION 

EFFECTS/RATIONALE : 

NO  REDUNDANCY  TO  PREVENT  OR  LIMIT  DAMAGE  TO  OTHER  SYSTEM 
COMPONENTS  FROM  CATASTROPHIC  FAILURE.  DAMAGE  TO  OTHER  SYSTEMS 
CAN  DESTROY  THE  VEHICLE.  THE  FAILURE  COULD  ONLY  OCCUR  AS  A 
RESULT  OF  A PREVIOUS  FAILURE  OF  THE  RELIEF  VALVE  BUILT  INTO 
THE  I/B  FILL  AND  DRAIN  VALVE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-130 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

2022 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  FILL  AND  DRAIN  LINE  (FH6) 
RESTRICTED  FLOW 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  FILL  AND  DRAIN  SUBSYSTEM 
LH2  FILL  AND  DRAIN  LINE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
MC2 7 1-0 07 6-0 021 


CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  PREVENT  TANK  FILL  AT  SCHEDULED  RATES. 
LAUNCH  DELAY  TO  CLEAR  LINE  WILL  BE  NECESSARY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-131 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/19/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  2023  ABORT:  3/3 

ITEM:  LH2  FILL  AND  DRAIN  LINE  (FH6) 

FAILURE  MODE:  LOSS  OF  INSULATING  VACUUM 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  FILL  AND  DRAIN  LINE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0076-0021 

CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE: 

FAILURE  WILL  ALLOW  LH2  TEMPERATURE  TO  INCREASE  DURING  LOADING. 
IF  LH2  TEMPERATURE  IS  TOO  HIGH,  ENGINE  START  WILL  BE  PREVENTED 
AND  LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-132 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

2031 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  LH2  GROUND  FILL  AND  DRAIN  (ORB/GND)  DISCONNECT 

(ORBITER  HALF)  (PD11) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  GROUND  FILL  AND  DRAIN  (ORB/GND)  DISCONNECT  (ORBITER 
HALF) 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

1/1 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0005-0041,-0021 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  CONTAMINATION,  PROCEDURAL  ERROR,  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  IS  A FIRE/EXPLOSION  HAZARD.  LEAKING  LH2  CAN  DAMAGE 
TPS  TILES  AND  CAUSE  LOSS  OF  VEHICLE  DURING  ENTRY.  LEAKAGE  WILL 
ONLY  OCCUR  PRELAUNCH. 


REFERENCES:  VS70-41500X,  JSC-19041,  BOOSTER  SYSTEMS  BRIEFS 


REPORT  DATE  01/16/87 


C-133 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/14/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2041  ABORT:  1/1 

ITEM:  LH2  HI  POINT  BLEED  (ORB/GND)  DISCONNECT  (ORB  HALF) 

(PD17) 

FAILURE  MODE:  EXTERNAL  LEAK 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  HI  POINT  BLEED  (ORB/GND)  DISCONNECT  (ORBITER  HALF) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0004-0003 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LEAKAGE  OF  LH2  IS  A FIRE/EXPLOSION  HAZARD.  LEAKING  RESIDUAL 
HYDROGEN  DURING  POWERED  ASCENT  CAN  COMBINE  WITH  ATMOSPHERIC 
OXYGEN  AND  CREATE  AN  EXPLOSIVE  MIXTURE.  LEAKING  LH2  DURING 
PRELAUNCH  CAN  DAMAGE  TPS  TILES  AND  CAUSE  LOSS  OF  VEHICLE  DURING 
ENTRY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-134 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM:  MPS 

MDAC  ID:  2042 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  LH2  HI  POINT  BLEED  (ORB/GND)  DISCONNECT  (ORB  HALF) 

(PD17) 

FAILURE  MODE:  FAIL  TO  CLOSE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  HI  POINT  BLEED  (ORB/GND)  DISCONNECT  (ORBITER  HALF) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

2/2R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ F ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0004-0003 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

VALVE  IS  EXPECTED  TO  CLOSE  PRELAUNCH  AND  REMAIN  CLOSED.  FAILURE 
SHOULD  CAUSE  LAUNCH  DELAY.  LOSS  OF  REDUNDANCY  WILL  ALLOW  LH2  TO 
ESCAPE  THE  VEHICLE  DURING  ASCENT  RESULTING  IN  LOSS  OF  VEHICLE. 

IF  NOMINAL  ORBIT  IS  ACHIEVED,  REMAINING  H2  WILL  BE  VENTED 
AND  BE  OF  NO  FURTHER  CONSEQUENCE. 


REFERENCES:  VS70-41500X,  V070-415610 


REPORT  DATE  01/16/87 


C-135 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM:  MPS 

MDAC  ID:  2043 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  LH2  HI  POINT  BLEED  (ORB/GND)  DISCONNECT  (ORB  HALF) 

(PD17) 

FAILURE  MODE:  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


LH2 

LH2 

LH2 


SYSTEM 

FILL  AND  DRAIN  SUBSYSTEM 

HI  POINT  BLEED  (ORB/GND)  DISCONNECT  (ORBITER  HALF) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ F ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0004-0003 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE: 

PRELAUNCH  FAILURE  SHOULD  CAUSE  LAUNCH  DELAY.  SECOND  FAILURE,  OR 
LOSS  OF  ALL  REDUNDANCY  WILL  ALLOW  ESCAPE  OF  LH2  FROM  THE  MAIN 
FEEDLINE  DURING  ASCENT.  ENGINES  COULD  CUTOFF  EARLY  OR  EXPLODE 
BECAUSE  OF  LOW  PUMP  INLET  PRESSURE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-136 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/15/86 

MPS 

2044 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

(PD17) 

FAILURE  MODE: 


LH2  HI  POINT  BLEED  (ORB/GND)  DISCONNECT  (ORB  HALF) 
FAIL  TO  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  HI  POINT  BLEED  (ORB/GND)  DISCONNECT  (ORBITER  HALF) 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

/NA 

/NA 

TAL: 

/NA 

/NA 

AOA: 

/NA 

/NA 

/NA 

ATO: 

/NA 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0004-0003 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  PRELAUNCH  WILL  PRECLUDE  LIFTOFF 
OPEN  IN  ANY  OTHER  PHASE. 


NOT  REQUIRED  TO 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-137 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
3/1R 
3/1R 

ITEM:  LH2  REPLENISH  VALVE  (PV13) 

FAILURE  MODE:  FAIL  TO  OPEN 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 


DATE:  10/15/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2051 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  REPLENISH  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ p ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0021, 

-0031,-0041,-0051 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  PRELAUNCH  WILL  CAUSE  LAUNCH  DELAY.  LOSS  OF  ALL 
REDUNDANCY  WILL  PRECLUDE  LH2  DUMP.  HYDROGEN  COULD  THEN  ESCAPE 
THE  VEHICLE  THROUGH  THE  RELIEF  VALVE  DURING  ENTRY  AND  LANDING, 
CREATING  AN  EXPLOSIVE  MIXTURE  WITH  ATMOSPHERIC  OXYGEN. 

THE  VALVE  IS  NOT  REQUIRED  TO  OPEN  DURING  RTLS. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-138 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/15/86 

MPS 

2052 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  REPLENISH  VALVE  (PV13) 

FAILURE  MODE:  FAIL  TO  CLOSE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  REPLENISH  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

/NA 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0021, -0031, -0041,-0051 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  PRELAUNCH  WILL  CAUSE  LAUNCH  DELAY.  FAILURE  TO  CLOSE 
AFTER  MPS  DUMP  AND  PURGE  IS  OF  NO  CONSEQUENCE.  NO  REDUNDANCY  FOR 

THIS  FAILURE  MODE.  THE  VALVE  IS  NOT  REQUIRED  TO  CLOSE  DURING  AN 
RTLS . 


REFERENCES:  JSC-19041,  BOOSTER  SYSTEMS  BRIEFS?  VS70-41500X 


REPORT  DATE  01/16/87 


C-139 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/15/86 

MPS 

2053 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  LH2  REPLENISH  VALVE  (PV13) 

FAILURE  MODE:  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  REPLENISH  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AO  A: 

3/1R 

ATO: 

3/1R 

A [ 2 ] 

B [ P ] 

HDW/FUNC 

/NA 

3/1R 

3/1R 

3/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0021, -0031, -0041, -0051 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE: 

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY.  LOSS  OF  ALL 
REDUNDANCY  WIL  PREVENT  LH2  DUMP.  RESIDUAL  H2  WILL  ESCAPE  THROUGH 
THE  RELIEF  VALVE  THROUGHOUT  THE  REMAINDER  OF  THE  FLIGHT.  THIS  IS 
A HAZARD  DURING  ENTRY  AND  LANDING,  WHEN  THE  H2  CAN 
COMBINE  WITH  ATMOSPHERIC  OXYGEN. 


REFERENCES: 


JSC-19041,  BOOSTER  SYSTEMS  BRIEFS;  VS70-41500X 


REPORT  DATE  01/16/87 


C-140 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/15/86 

MPS 

2054 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


LH2  REPLENISH  VALVE  (PV13) 
FAIL  TO  REMAIN  CLOSED 


HDW/FUNC 

2/1R 

2/1R 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  FILL  AND  DRAIN  SUBSYSTEM 
LH2  REPLENISH  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRE  LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0021, -0031,-0041,-0051 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY.  LOSS  OF  AT.T, 
REDUNDANCY , OR  SECOND  FAILURE,  WILL  ALLOW  LH2TO  l^JMP^OVERBOARn 
DURING  POWERED  FLIGHT,  RESULTING  IN  OF  VEHIcS^  0VERB0ARD 


REFERENCES:  SSSH;  VS70-41500X 


REPORT  DATE  01/16/87 


C-141 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/15/86 

MPS 

2055 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  REPLENISH  VALVE  (PV13) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  REPLENISH  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0021, 

-0031,-0041,-0051 

CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  IS  A FIRE/ EXPLOSION  HAZARD.  LEAKAGE  OF 
RESIDUAL  H2  DURING  POWERED  FLIGHT  CAN  CREATE  AN  EXPLOSIVE  MIXTURE 
WITH  ATMOSPHERIC  OXYGEN.  NO  REDUNDANCY  FOR  THIS  MODE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-142 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/16/86 

MPS 

2061 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  HI  POINT  BLEED  VALVE  (PV22) 

FAILURE  MODE:  FAIL  TO  REMAIN  OPEN,  FAIL  TO  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  HI  POINT  BLEED  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0023, -0033, -0043,-0053 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY. 
THIS  FAILURE  WILL  HAVE  NO  HARMFUL  EFFECTS. 
THIS  FAILURE  MODE. 


IF  LAUNCH  OCCURS, 
NO  REDUNDANCY  FOR 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-143 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/16/86 

MPS 

2062 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  LH2  HI  POINT  BLEED  VALVE  (PV22) 

FAILURE  MODE:  FAIL  TO  REMAIN  CLOSED,  FAIL  TO  CLOSE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  HI  POINT  BLEED  VALVE 

4) 

5) 

6) 

7) 

3) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

2/1R 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ F ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0023, -0033, -0043,-0053 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY.  SECOND  FAILURE,  OR 
LOSS  OF  ALL  REDUNDANCY,  WOULD  ALLOW  LH2  TO  ESCAPE  THROUGH  THE 
BLEED  DISCONNECT  AND  CAUSE  LOSS  OF  VEHICLE,  ON  THE  PAD  OR  DURING 
POWERED  ASCENT,  BY  FIRE  OR  EXPLOSION. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-144 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/16/86 

MPS 

2063 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  HI  POINT  BLEED  VALVE  (PV22) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  HI  POINT  BLEED  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0023, -0033, -0043, -0053 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  CAN  CREATE  AN  EXPLOSIVE  MIXTURE  WITH  ATMOSPHERIC  02 
BEFORE  LAUNCH  OR  DURING  POWERED  ASCENT.  POSSIBLE  DESTRUCTION  OF 
THE  VEHICLE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-145 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/16/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2071  ABORT:  1/1 

ITEM:  LH2  SYSTEM  DELTA-P  TRANSDUCER  (MT44,  MT50) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  SYSTEM  DELTA-P  TRANSDUCER 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC449-0164-0002 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LEAKING  HYDROGEN  IS  A(N)  FIRE/EXPLOSION  HAZARD.  POSSIBLE 
DESTRUCTION  OF  THE  VEHICLE. 


REFERENCES:  . VS70-415007 


REPORT  DATE  01/16/87 


C-146 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/17/86 

MPS 

2072 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  SYSTEM  DELTA-P  TRANSDUCER  (MT44,  MT50) 

FAILURE  MODE:  ERRONEOUS  INDICATION 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  SYSTEM  DELTA-P  TRANSDUCER 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC449-0164-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

THE  TRANSDUCER  IS  ONLY  USED  DURING  PRELAUNCH.  FAILURE  CAN  CAUSE 
LAUNCH  DELAY.  LOSS  OF  ALL  REDUNDANCY  WILL  CAUSE  LAUNCH  DELAY. 

IF  LAUNCH  OCCURS,  FAILURE  WILL  HAVE  NO  EFFECT  ON  OTHER  PHASES. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-147 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/17/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2081  ABORT:  1/1 

ITEM:  LH2  HI  POINT  BLEED  LINE  (FH19) 

FAILURE  MODE:  RUPTURE 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SUBSYSTEM 

3)  LH2  HI  POINT  BLEED  LINE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AO  A: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0010 


CAUSES:  OVERPRESSURIZATION 

EFFECTS/RATIONALE : 

RUPTURE  OF  THE  LINE  CAN  CAUSE  DAMAGE  TO  OTHER  COMPONENTS  LEADING 
TO  THE  POSSIBLE  DESTRUCTION  OF  THE  VEHICLE.  ESCAPING  HYDROGEN  IS 
ALSO  A HAZARD. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-148 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

2082 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


LH2  HI  POINT  BLEED  LINE  (FH19) 
RESTRICTED  FLOW 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  FILL  AND  DRAIN  SUBSYSTEM 
LH2  HI  POINT  BLEED  LINE 


2) 

3) 

4) 

5) 

6) 
7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0010 

CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

FAILURE  WILL  CAUSE  LAUNCH  DELAY. 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

REFERENCES:  VS70-41500X 


HDW/FUNC 

3/3 

3/3 


REPORT  DATE  01/16/87 


C-149 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/19/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2083  ABORT:  1/1 

ITEM:  LH2  HI  POINT  BLEED  LINE  (FH19) 

FAILURE  MODE:  LOSS  OF  INSULATING  VACUUM 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  FILL  AND  DRAIN  SYSTEM 

3)  LH2  HI  POINT  BLEED  LINE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0010 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

FAILURE  WOULD  SPEED  UP  BOILOFF  OF  RESIDUAL  LH2  IN  THE  LINE.  THE 
INCREASING  PRESSURE  MAY  CAUSE  THE  LINE  TO  BURST,  RESULTING  IN 
LOSS  OF  VEHICLE.  NO  HAZARD  AFTER  MPS  DUMP  & PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-150 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/17/86 

MPS 

2091 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  LH2  RECIRCULATION  DISCONNECT  VALVE  (PD3) 

FAILURE  MODE:  FAIL  TO  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  (ORB/ET)  DISCONNET  VALVE  (ORB  HALF) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 
LANDING/ SAFING : 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0390-0005, -0006, -0016, -0026 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WOULD  NOT  ALLOW  RECIRCULATION  TO  BEGIN  AND 
WOULD  FORCE  A LAUNCH  DELAY.  THE  VALVE  IS  NOT  COMMANDED  TO  OPEN 
IN  ANY  OTHER  PHASE.  NO  REDUNDANCY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-151 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/20/86 

MPS 

2092 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRCULATION  DISCONNECT  VALVE  (PD3) 

FAILURE  MODE:  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  (ORB/ET)  DISCONNET  VALVE  (ORB  HALF) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0390-0005, 

-0006,-0016,-0026 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  BEFORE  LAUNCH  WILL  CAUSE  LAUNCH  DELAY.  IF  LH2 
RECIRCULATION  AND  TOPPING  ARE  ACCOMPLISHED  BEFORE  THE  FAILURE,  IT 
WILL  HAVE  NO  IMPACT  ON  THE  MISSION. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-152 


INDEPENDENT  CRBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/17/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2093 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  RECIRCULATION  DISCONNECT  VALVE  (PD3) 

FAILURE  MODE:  FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  (ORB/ET)  DISCONNET  VALVE  (ORB  HALF) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

LOCATION:  AFT  FUSELAGE 

B [NA  ] 

C [NA  ] 

PART  NUMBER:  MC284-0390-0005, 

-0006,-0016,-0026 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

IF  THE  VALVE  IS  NOT  CLOSED  AT  ET  SEP,  THE  THRUST  OF  ESCAPING  LH2 
CAN  CAUSE  RECONTACT  WITH  THE  ET  AND  LOSS  OF  THE  ORBITER.  IF 
RECONTACT  DAMAGE  IS  LIMITED  TO  TPS  TILES,  THE  ORBITER  CAN  BE 
DESTROYED  DURING  ENTRY.  AERO  FORCES  WILL  PREVENT  RECONTACT  AFTER 
A RTLS  ET  SEP. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-153 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/17/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2094 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  RECIRCULATION  DISCONNECT  VALVE  (PD3) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  RECIRCULATION  SYSTEM 

LH2  RECIRCULATION  (ORB/ET)  DISCONNET  VALVE  (ORB  HALF) 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
8) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


HDW/FUNC 
1/1 
1/1 
3/3 
1/1 


CRITICALITIES 


ABORT 
RTLS: 
TAL: 
AOA: 
ATO: 


LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0390-0005, -0006, -0016, -0026 

CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 

LEAKAGE^OF^H^IS^  A FIRE/EXPLOSION  HAZARD,ONraEPAD0RIN 
POWERED  ASCENT.  LEAKING  LH2  CAN  DAMAGE  TPS  TILES  AND  CAUSE  LOSS 
OF  VEHICLE  DURING  ENTRY. 


REFERENCES : 


C 


REPORT  DATE  01/16/87 


C-154 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


10/20/86 

MPS 

2101 


HIGHEST  CRITICALITY  HDW/FUNC 


FLIGHT: 

ABORT: 


LH2  RECIRCULATION  PUMP  VALVE  (PV14,  PV15,  PV16) 

PS  TT  fPA  Ar>P\T  tsu  t r mA  — * • 


DATE: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 

LEAD  ANALYST: . W.J.MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  PUMP  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


3/3 

3/3 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0021, -0031, -0041, -0051 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  WILL  CAUSE  LAUNCH  DELAY.  IF  LAUNCH  OCCURS 
THIS  FAILURE  WILL  HAVE  NO  EFFECT  ON  THE  MISSION.  ' 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-155 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/20/86 

MPS 

2102 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRCULATION  PUMP  VALVE  (PV14,  PV15,  PV16) 

FAILURE  MODE:  FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  PUMP  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0021, 

-0031,-0041,-0051 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  CAN  CAUSE  LAUNCH  DELAY.  IF  LAUNCH  OCCURS,  THIS 
FAILURE  WILL  HAVE  NO  HARMFUL  EFFECT. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-156 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

1/1 

1/1 

PV16) 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  PUMP  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/20/86 

MPS 

2103 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  LH2  RECIRCULATION  PUMP  VALVE  (PV14,  PV15, 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRE  LAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING : 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0021, -0031, -0041, -0051 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  IS  A FIRE/ EXPLOSION  HAZARD  PRELAUNCH  AND  DURING 
POWERED  ASCENT  WHEN  THE  VEHICLE  IS  STILL  IN  THE  ATMOSPHERE.  NO 
HAZARD  AFTER  MPS  DUMP  AND  PURGE. 


REFERENCES:  VA70-41500X 


REPORT  DATE  01/16/87 


C-157 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/20/86 

MPS 

2111 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  PRESTART  CONDITIONING  MANIFOLD  (MA3) 

FAILURE  MODE:  RUPTURE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  MANIFOLD 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0017 


CAUSES:  OVERPRESSURIZATION 

EFFECTS/RATIONALE : 

BURST  OF  A LINE  CAN  POTENTIALLY  DAMAGE  OTHER  COMPONENTS  AND  LEAD 
TO  DESTRUCTION  OF  THE  VEHICLE  OR  LOSS  OF  LIFE.  ESCAPING  HYDROGEN 
IS  ALSO  A HAZARD. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-158 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/20/86  HIGHEST  CRITICALITY  HDW/FUNC 

1/1 
1/1 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  MANIFOLD 

4) 

5) 

6) 

7) 

8) 

9) 


SUBSYSTEM:  MPS 

MDAC  ID:  2112 


FLIGHT: 

ABORT: 


ITEM:  LH2  PRESTART  CONDITIONING  MANIFOLD  (MA3) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0017 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  IS  A FIRE/EXPLOSION  HAZARD  ON  THE  PAD  AND  WHILE 
STILL  IN  THE  ATMOSPHERE  DURING  POWERED  FLIGHT.  NO  HAZARD  AFTER 
MPS  DUMP  AND  PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-159 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/23/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  2113  ABORT:  3/3 

ITEM:  LH2  PRESTART  CONDITIONING  MANIFOLD  (MA3) 

FAILURE  MODE:  RESTRICTED  FLOW 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A, J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  MANIFOLD 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0017 


CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

FAILURE  MAY  CAUSE  LAUNCH  DELAY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-160 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/19/86 

MPS 

2114 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  PRESTART  CONDITIONING  MANIFOLD  (MA3) 

FAILURE  MODE:  LOSS  OF  INSULATING  VACUUM 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  MANIFOLD 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0017 

CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

FAILURE  WOULD  ALLOW  LH2  TEMPERATURE  TO  INCREASE  DURING  PRESTART 
CONDITIONING.  IF  LH2  TEMPERATURE  IS  TOO  HIGH,  ENGINE  START  WILL 
BE  PREVENTED,  AND  LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-161 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/23/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2121  ABORT:  1/1 

ITEM:  LH2  PRESTART  CONDITIONING  PUMP  LINE  (FH11,  FH13, 

FH15) 

FAILURE  MODE:  RUPTURE 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  PUMP  LINE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0011, -0012, -0013 


CAUSES:  OVERPRESSURIZATION 

EFFECTS/RATIONALE : 

BURST  OF  THE  LINE  CAN  DAMAGE  OTHER  COMPONENTS  AND  LEAD  TO  LOSS  OF 
LIFE  OR  VEHICLE.  ESCAPING  HYDROGEN  IS  ALSO  A HAZARD. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-162 


INDEPENDENT  0R3ITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

2122 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  LH2  PRESTART  CONDITIONING  PUMP  LINE  (FH11, 

FH15) 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  PUMP  LINE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0011, -0012, -0013 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  MAY  CAUSE  LAUNCH  DELAY. 


REFERENCES:  VS70-41500X 


HDW/FUNC 

3/3 

3/3 

FH13, 


REPORT  DATE  01/16/87 


C-163 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/19/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  2123  ABORT:  3/3 

ITEM:  LH2  PRESTART  CONDITIONING  PUMP  LINE  (FH11,  FH13, 

FH15) 

FAILURE  MODE:  LOSS  OF  INSULATING  VACUUM 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  PUMP  LINE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0011/-0012,-0013 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

FAILURE  WOULD  ALLOW  LH2  TEMPERATURE  TO  INCREASE  DURING  PRESTART 
CONDITIONING.  IF  LH2  TEMPERATURE  IS  TOO  HIGH,  ENGINE  START  WILL 
BE  PREVENTED,  AND  LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-164 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/21/86 

MPS 

2131 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  LH2  PRESTART  CONDITIONING  RETURN  LINE  (FH12,  FH14, 

FH16) 

FAILURE  MODE:  RUPTURE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  RETURN  LINE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AO  A: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0015, -0016, -0024 


CAUSES:  OVERPRESSURIZATION 


EFFECTS/RATIONALE : 

RUPTURE  OF  THE  LINE  CAN  DAMAGE  OTHER  COMPONENTS  AND  LEAD  TO  LOSS 
OF  LIFE  OR  VEHICLE  IN  ANY  FLIGHT  PHASE.  ESCAPING  H2  WOULD  BE  A 
FIRE/EXPLOSION  HAZARD  DURING  PRELAUNCH  OR  MPS  ASCENT. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-165 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/21/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2132  ABORT:  1/1 

ITEM:  LH2  PRESTART  CONDITIONING  RETURN  LINE  (FH12,  FH14, 

FH16) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  RETURN  LINE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0015,-0016,-0024 

CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  IS  A FIRE/EXPLOSION  HAZARD  ON  THE  PAD  OR  DURING 
POWERED  FLIGHT.  NO  HAZARD  AFTER  MPS  DUMP  AND  PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-166 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/21/86 

MPS 

2133 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  LH2  PRESTART  CONDITIONING  RETURN  LINE  (FH12,  FH14, 

FH16 ) 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

LH2  SYSTEM 

2) 

LH2  RECIRCULATION  SYSTEM 

3) 

LH2  PRESTART  CONDITIONING 

RETURN  LINE 

4) 

5) 

6) 

7) 

8) 

■ 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0015, -0016, -0024 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  MAY  CAUSE  LAUNCH  DELAY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-167 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/19/86 

MPS 

2134 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  LH2  PRESTART  CONDITIONING  RETURN  LINE  (FH12,  FH14, 

FH16) 

FAILURE  MODE:  LOSS  OF  INSULATING  VACUUM 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 


1) 

LH2  SYSTEM 

2) 

LH2  RECIRCULATION  SYSTEM 

3) 

LH2  PRESTART  CONDITIONING 

RETURN  LINE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0015, -0016,-0024 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

FAILURE  WOULD  ALLOW  LH2  TEMPERATURE  TO  INCREASE  DURING  PRESTART 
CONDITIONING.  IF  LH2  TEMPERATURE  IS  TOO  HIGH,  ENGINE  START  WILL 
BE  PREVENTED,  AND  LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-168 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/21/86 

MPS 

2141 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  PRESTART  CONDITIONING  REPLENISH  LINE  (FH17) 

FAILURE  MODE:  RUPTURE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  REPLENISH  LINE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL: 

1/1 

AOA: 

1/1 

ATO: 

1/1 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0019 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  OVERPRESSURIZATION 

EFFECTS/RATIONALE : 

RUPTURE  OF  THE  LINE  CAN  DAMAGE  OTHER  PARTS  AND  CAUSE  LOSS  OF  LIFE 
OR  VEHICLE.  ESCAPING  HYDROGEN  IS  ALSO  A HAZARD. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-169 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

2142 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  PRESTART  CONDITIONING  REPLENISH  LINE  (FH17) 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  REPLENISH  LINE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0019 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  MAY  CAUSE  LAUNCH  DELAY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-170 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

3/3 

3/3 

(FH17) 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  REPLENISH  LINE 

4) 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/19/86 

MPS 

2143 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


LH2  PRESTART  CONDITIONING  REPLENISH  LINE 
LOSS  OF  INSULATING  VACUUM 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0019 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES: 

FAILURE 


MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

FAILURE  WOULD  ALLOW  LH2  TEMPERATURE  TO  INCREASE 
REPLENISHMENT.  IF  LH2  TEMPERATURE  IS  TOO  HIGH 
BE  PREVENTED,  AND  LAUNCH  WILL  BE  DELAYED. 


DURING 

ENGINE  START  WILL 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-171 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/21/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2151  ABORT:  1/1 

ITEM:  LH2  PRESTART  CONDITIONING  RETURN  LINE  (FH18) 

FAILURE  MODE:  RUPTURE 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  RETURN  LINE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/S AFING: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0018 


CAUSES:  OVERPRESSURIZATION 

EFFECTS/RATIONALE : 

RUPTURE  OF  THE  LINE  CAN  CAUSE  DAMAGE  TO  OTHER  PARTS  THAT  COULD 
LEAD  TO  LOSS  OF  LIFE  OR  VEHICLE.  ESCAPING  HYDROGEN  IS  ALSO  A 
HAZARD. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-172 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

2152 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  LH2  PRESTART  CONDITIONING  RETURN  LINE  (FH18) 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  RETURN  LINE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC  ABORT  HDW/FUNC 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0018 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  MAY  CAUSE  LAUNCH  DELAY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-173 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/19/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  2153  ABORT:  3/3 

ITEM:  LH2  PRESTART  CONDITIONING  RETURN  LINE  (FH18) 

FAILURE  MODE:  LOSS  OF  INSULATING  VACUUM 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  PRESTART  CONDITIONING  RETURN  LINE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0075-0018 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

FAILURE  WOULD  ALLOW  LH2  TEMPERATURE  TO  INCREASE  DURING  PRESTART 
CONDITIONING.  IF  LH2  TEMPERATURE  IS  TOO  HIGH,  ENGINE  START  WILL 
BE  PREVENTED,  AND  LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-174 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/21/86 

MPS 

2161 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  LH2  RECIRCULATION  MANIFOLD  RELIEF  VALVE  (RV7) 

FAILURE  MODE:  FAIL  TO  OPEN  (RELIEVE) 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  MANIFOLD  RELIEF  VALVE 

4) 

5) 

6) 

7) 

®) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0474-0002,  -0003 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  WOULD  ALLOW  RUPTURE  OF  LH2  PRESTART  CONDITIONING  RETURN 
LINES,  REPLENISH  LINE  OR  MANIFOLD  DURING  THE  PERIOD  FROM  MECO  + 2 
SEC  (CLOSING  OF  LH2  RECIRCULATION  DISCONNECT  VALVE)  TO  OMS-1 
IGNITION  + 6 SEC  (OPENING  OF  TOPPING  VALVE)  WHEN  THESE  LINES 
ARE  ISOLATED. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-175 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/22/86 

MPS 

2162 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  RECIRCULATION  MANIFOLD  RELIEF  VALVE  (RV7) 
FAIL  TO  REMAIN  CLOSED,  INTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  MANIFOLD 

4) 

5) 

6) 

7) 

8) 

9) 


RELIEF  VALVE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0474-0002,  -0003 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

NO  HAZARDOUS  EFFECTS. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-176 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/22/86 

MPS 

2163 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


LH2  RECIRCULATION  MANIFOLD  RELIEF  VALVE  fRV7) 
EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  MANIFOLD  RELIEF  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0474-0002,  -0003 


HDW/FUNC 

VI 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

™*£?JL0F  H2  IS  A fire/explosion  HAZARD  WHEN  THE  VEHICLE  IS  IN 
THE  ATMOSPHERE.  NO  HAZARD  AFTER  MPS  DUMP  & PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-177 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/22/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  2164  ABORT:  3/3 

ITEM:  LH2  RECIRCULATION  MANIFOLD  RELIEF  VALVE  (RV7) 

FAILURE  MODE:  FAIL  TO  CLOSE  (RESEAT) 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  MANIFOLD  RELIEF  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0474-0002,  -0003 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

NO  HAZARDOUS  EFFECTS. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-178 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/21/86 

MPS 

2171 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRCULATION  PUMP  (PP1,  PP2,  PP3) 

FAILURE  MODE:  INADVERTENT  OPERATION 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  PUMP  (3) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

HDW/FUNC 
3/3 
3/3 
3/3 
3/3 


C [NA  ] 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC281-0030-0001 


CAUSES:  INADVERTENT  ACTIVATION,  PROCEDURAL  ERROR,  IMPROPER  INPUT 

EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  MAY  CAUSE  LAUNCH  DELAY.  FAILURE  IN  OTHER 
FLIGHT  PHASES  IS  NOT  HAZARDOUS. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-179 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/21/86 

MPS 

2172 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRCULATION  PUMP  (PP1,  PP2,  PP3) 

FAILURE  MODE:  INTERMITTENT  OPERATION,  ERRATIC  OPERATION 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  PUMP  (3) 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC281-0030-0001 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  DURING  PRELAUNCH  RECIRCULATION  COULD  CAUSE  LAUNCH  DELAY. 
NO  EFFECT  ON  OTHER  PHASES. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-180 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/21/86  HIGHEST  CRITICALITY 

SUBSYSTEM:  MPS  FLIGHT: 

MDAC  ID:  2173  ABORT: 

ITEM:  LH2  RECIRCULATION  PUMP  (PP1,  PP2,  PP3) 

FAILURE  MODE:  FAIL  TO  START 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  PUMP  (3) 

4) 

5) 

6) 

7) 

8) 

9) 


HDW/FUNC 

3/3 

3/3 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING : 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC281-0030-0001 

CAUSES:  MECHANICAL  SHOCK,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

PUMP  IS  USED  ONLY  DURING  PRELAUNCH.  FAILURE  WILL  CAUSE  LAUNCH 
DELAY.  IF  ONE  PUMP  FAILS,  THE  REMAINING  PUMPS  COULD  PROVIDE 
ADEQUATE  CONDITIONING  IF  THE  PREVALVE  CORRESPONDING  TO  THE  FAILED 
PUMP  IS  OPENED.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  BECAUSE  ALL 
THREE  PUMPS  ARE  CONTAINED  IN  A SINGLE  PACKAGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-181 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM:  MPS 

MDAC  ID:  2174 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRCULATION  PUMP  (PP1,  PP2,  PP3) 

FAILURE  MODE:  FAIL  TO  STOP 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  PUMP  (3) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC281-0030-0001 


CAUSES:  PROCEDURAL  ERROR,  IMPROPER  INPUT,  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

FAILURE  WILL  CAUSE  LAUNCH  DELAY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-182 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/21/86 

MPS 

2175 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRCULATION  PUMP  (PP1,  PP2,  PP3) 

FAILURE  MODE:  PREMATURE  OPERATION 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  PUMP  (3) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC281-0030-0001 


CAUSES:  PROCEDURAL  ERROR,  INADVERTENT  ACTIVATION 

EFFECTS/RATIONALE : 

FAILURE  COULD  CAUSE  LAUNCH  DELAY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-183 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/22/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2176 

ITEM:  LH2  RECIRCULATION 

FAILURE  MODE:  DELAYED  OPERATION 

LEAD  ANALYST:  W.J.MCNICOLL 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 

PUMP  (PP1,  PP2,  PP3) 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  PUMP  (3) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC281-0030-0001 

CAUSES:  PROCEDURAL  ERROR,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  COULD  CAUSE  LAUNCH  DELAY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-184 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
1/1 
1/1 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  PUMP  (3) 

4) 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/22/86 

MPS 

2177 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  LH2  RECIRCULATION  PUMP  (PP1,  PP2.  PP3) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC281-0030-0001 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  IS  A FIRE/EXPLOSION  HAZARD.  NO  HAZARD  AFTER  MPS 
DUMP  & PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-185 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/22/86 

MPS 

2181 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  PRE-PRESS  CHECK  VALVE  (CV17) 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  LH2  TANK  PRE-PRESS  CHECK  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

INABILITY  TO  PRE- PRESSURIZE  THE  LH2  TANK  WILL  CAUSE  LAUNCH  DELAY. 
THE  VALVE  IS  NOT  NORMALLY  OPEN  IN  ANY  OTHER  PHASE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-186 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

2182 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  LH2  PRE-PRESS  CHECK  VALVE  (CV17) 

FAILURE  MODE:  FAIL  TO  CLOSE  (RESEAT),  FAIL  TO  REMAIN  CLOSED 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  LH2  TANK  PRE-PRESS  CHECK  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ F ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

SECOND  FAILURE  WILL  ALLOW  ULLAGE  PRESSURE  TO  BE  LOST,  RESULTING 
IN  LAUNCH  DELAY  DURING  PRELAUNCH  OR  LOSS  OF  VEHICLE  DURING 
POWERED  FLIGHT. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-187 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

2183 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  PRE-PRESS  CHECK  VALVE  (CV17) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

LH2  SYSTEM 

2) 

LH2  TANK  PRESSURIZATION  SYSTEM 

3) 

LH2  TANK  PRE-PRESS  CHECK  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] B 

[NA 

] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 

CAUSES:  MECHANICAL  SHOCK#  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE: 

LEAKAGE  OF  H2  IS  A FIRE/EXPLOSION  HAZARD.  NO  HAZARD  AFTER  MPS 
DUMP  & PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-188 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

2191 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  1/lR 


ITEM:  GH2  PRESSURIZATION  ISOLATION  CHECK  VALVE 

(CV21,CV22,CV23) 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  TANK  PRESSURIZATION  SYSTEM 
GH2  PRESSURIZATION  ISOLATION  CHECK  VALVE  (3) 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0479-0002,  -0012 


HDW/FUNC 

1/lR 

1/lR 

1/lR 

1/lR 


c [ p ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


OR 


EFFECTS/RATIONALE : 

FAILURE  MAY  CAUSE  LAUNCH  DELAY.  SECOND  FAILURE, 
i?r?m™«ALL  REDUNDANCY  WILL  CAUSE  LOW  ULLAGE  PRESSURE  AND 
MULTIPLE  ENGINE  SHUTDOWN  DURING  ASCENT.  FAILURE  DURING  ABORT 
WILL  CAUSE  SHUTDOWN  OF  REMAINING  ENGINES  AND  LOSS  OF  VEHICLE 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-189 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/24/86 

MPS 

2192 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  GH2  PRESSURIZATION  ISOLATION  CHECK  VALVE 

(CV21,CV22,CV23  AND  TEST  PORTS  TP5,TP6,TP7) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  GH2  PRESSURIZATION  ISOLATION  CHECK  VALVE  (3) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0479-0002,  -0012 

CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  IS  A FIRE/EXPLOSION  HAZARD,  DURING  PRELAUNCH  OR 
POWERED  FLIGHT.  NO  HAZARD  AFTER  MPS  DUMP  & PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-190 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/27/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  2/1R 

MDAC  ID:  2201  ABORT:  1/1R 

ITEM:  GH2  PRESSURIZATION  FLOW  CONTROL  VALVE 

(LV56 , LV57 , LV58) 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  GH2  PRESSURIZATION  FLOW  CONTROL  VALVE  (3) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1R 

LIFTOFF: 

2/1R 

TAL: 

1/1R 

ONORBIT: 

3/3 

AOA: 

1/1R 

DEORBIT: 

3/3 

ATO: 

1/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC280-0017-0015,  -0361 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

SECOND  ASSOCIATED  FAILURE  WILL  CAUSE  LOSS  OF  VEHICLE  BECAUSE  OF 
LOW  ULLAGE  PRESSURE.  LOSS  OF  ALL  REDUNDANCY  WILL  CAUSE  LAUNCH 
DELAY  OR  LOSS  OF  VEHICLE  DURING  POWERED  ASCENT.  LOW  ULLAGE 
PRESSURE  DURING  ABORTS  CAN  CAUSE  SHUTDOWN  OF  REMAINING  ENGINES 
AND  LOSS  OF  VEHICLE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-191 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/27/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2202 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  1/1R 


ITEM:  GH2  PRESSURIZATION  FLOW  CONTROL  VALVE 

(LV56,LV57,LV58) 

FAILURE  MODE:  FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  GH2  PRESSURIZATION  FLOW  CONTROL  VALVE  (3) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  2/1R  RTLS: 

LIFTOFF:  2/1R  TAL: 

ONORBIT:  3/3  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

1/1R 

1/1R 

1/1R 

1/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC280-0017-0015,  -0361 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

SECOND  ASSOCIATED  FAILURE  WILL  ALLOW  OVERPRESSURIZATION  OF  TANK 
AND  RELIEVING  OF  GH2  AT  LOW  ALTITUDE,  CREATING  A FIRE/EXPLOSION 
HAZARD.  LH2  TANK  TPS  FIRE  CAN  CAUSE  ET  STRUCTURAL  FAILURE.  LOSS 
OF  ALL  REDUNDANCY  WILL  CAUSE  OVERPRESSURIZATION  OF  TANK. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-192 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/27/86 

MPS 

2203 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


itEM:  GH2  PRESSURIZATION  FLOW  CONTROL  VALVE 

(LV56 , LV57 , LV58 ) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  GH2  PRESSURIZATION  FLOW  CONTROL  VALVE  (3) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  1/1  RTLS: 

LIFTOFF:  1/1  TAL: * 

ONORBIT:  3/3  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC280-0017-0015,  -0361 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LEAKING  H2  IS  A FIRE/EXPLOSION  HAZARD.  NO  HAZARD  AFTER  MPS  DUMP 
& PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-193 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/27/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2211 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  GH2  PRESSURIZATION  DISCONNECT  (PD5) 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  TANK  PRESSURIZATION  SYSTEM 

GH2  PRESSURIZATION  (ORB/ET)  DISCONNECT  (ORBITER  HALF) 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


HDW/FUNC 

3/3 

1/1 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0391-0001 


B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE:  

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY.  FAILURE  DURING 
POWERED  ASCENT  WILL  CUT  OFF  GH2  FLOW  TO  THE  LH2  TANK.  SUBSEQUENT 
LOSS  OF  ULLAGE  PRESSURE  WILL  CAUSE  MULTIPLE  ENGINE  SHUTDOWN  AND 
LOSS  OF  VEHICLE.  NO  REDUNDANCY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-194 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/28/86 

MPS 

2212 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM: 

FAILURE  MODE: 


GH2  PRESSURIZATION  DISCONNECT  (PD5) 
FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  TANK  PRESSURIZATION  SYSTEM 

GH2  PRESSURIZATION  (ORB/ET)  DISCONNECT  (ORBITER  HALF) 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

/NA 

1/1 

3/3 

1/1 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

1/1 

1/1 

1/1 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 

MC2 84 -03 9 1-0001 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

ESCAPING  H2  AT  ET  SEP  CAN  CAUSE  RECONTACT  WITH  ET  ANn 
DESTRUCTION  OF  VEHICLE.  VEHICLE  CAN  BE  DESTROYED  ON  ENTRY  IF  TPS 

H^rKd  S'SSSf*  PMLA™CH'  M3COKNECT  IS 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-195 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/28/86 

MPS 

2213 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  GH2  PRESSURIZATION  DISCONNECT  (PD5) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  GH2  PRESSURIZATION  (ORB/ET)  DISCONNECT  (ORBITER  HALF) 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

1/1 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0391-0001 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  ALLOW  HELIUM  LEAKAGE  AND  WILL  CAUSE  LAUNCH 
DELAY.  FAILURE  DURING  ASCENT  WILL  ALLOW  LEAKAGE  OF  H2  AND  CREATE 
A FIRE/EXPLOSION  HAZARD.  NO  HAZARD  AFTER  MPS  DUMP  & PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-196 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/28/86 

MPS 

2221 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 


LH2  TANK  GROUND  PRE-PRESS  DISCONNECT  (PD10) 
FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  LH2  TANK  GROUND  PRE-PRESSURIZATION  (ORB/GND)  DISCONNECT 
(ORBITER  HALF) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

/NA 

ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  PREVENT  PREPRESSURIZATION  OF  LH2  TANK  AND 
CAUSE  LAUNCH  DELAY.  FAILURE  DOES  NOT  APPLY  TO  OTHER  PHASES  SINCE 
THE  DISCONNECT/CHECK  VALVE  IS  ONLY  REQUIRED  TO  OPEN  DURING 
PRELAUNCH.  NO  REDUNDANCY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-197 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/28/86 

MPS 

2222 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  LH2  TANK  GROUND  PRE-PRESS  DISCONNECT  (PD10) 

FAILURE  MODE:  FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED,  EXTERNAL 

LEAKAGE 


LEAD  ANALYST: 


W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  LH2  TANK  GROUND  PRE-PRESSURIZATION  (ORB/GND)  DISCONNECT 
(ORBITER  HALF) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ F ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC2 7 6-0003 -0007 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

SECOND  ASSOCIATED  FAILURE  WILL  ALLOW  GH2  TO  ESCAPE  OVERBOARD. 
VEHICLE  CAN  BE  DESTROYED  BY  FIRE  OR  EXPLOSION  OF  ESCAPING  GH2  OR 
STRUCTURAL  FAILURE  OF  LH2  TANK  FROM  LOSS  OF  ULLAGE  PRESSURE. 

ONLY  ONE  REDUNDANT  COMPONENT,  SO  LOSS  OF  ALL  REDUNDANCY  SIMILARLY 
CAUSES  LOSS  OF  VEHICLE.  LOSS  OF  REDUNDANCY  IS  NOT  READILY 
DETECTABLE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-198 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/29/86 

MPS 

2231 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  GH2  PRESSURIZATION  MANIFOLD  TEST  POINT  COUPLING 

(PD16) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  GH2  PRESSURIZATION  MANIFOLD  TEST  POINT  COUPLING 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME276-0032-0017 


CAUSES:  CONTAMINATION , VIBRATION,  PROCEDURAL  ERROR 


EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  IS  A FIRE/EXPLOSION  HAZARD  DURING  PRELAUNCH  OR 
POWERED  FLIGHT.  NO  HAZARD  AFTER  MPS  DUMP  & PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-199 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/29/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  2/1R 

MDAC  ID:  2241  ABORT:  2/1R 

ITEM:  LH2  PREPRESSURIZATION  DISCONNECT  CHECK  VALVE  TEST 

PORT  (TP10) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  LH2  PREPRESSURIZATION  DISCONNECT  CHECK  VALVE  TEST  PORT 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ F ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415446-001 

CAUSES:  CONTAMINATION , VIBRATION,  PROCEDURAL  ERROR 


EFFECTS/RATIONALE : 

SECOND  ASSOCIATED  FAILURE  WILL  ALLOW  LEAKAGE  OF  H2,  CREATING  A 
FIRE/EXPLOSION  HAZARD  DURING  PRELAUNCH  OF  POWERED  FLIGHT. 

LOSS  OF  REDUNDANCY  IS  NOT  READILY  DETECTABLE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-200 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/29/86 

MPS 

2251 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  GH2  PRESSURIZATION  DUAL  CHECK  VALVE  TEST  PORT 

( TP2 1 , TP2  2 , TP2  3 ) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  GH2  PRESSURIZATION  DUAL  CHECK  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


(INLET)  TEST  PORT  (3) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS: 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415448-001 


CAUSES:  CONTAMINATION,  VIBRATION,  PROCEDURAL  ERROR 


EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  IS  A FIRE/ EXPLOSION  HAZARD.  NO  HAZARD  AFTER  MPS 
DUMP  & PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-201 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/29/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2261  ABORT:  1/1 

ITEM:  LH2  FEED  DISCONNECT  VALVE  (PD2) 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  FEED  (ORB/ET)  DISCONNECT  VALVE  (ORB  HALF) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0051, 

-0411,  -0431 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

PREIGNITION  FAILURE  WILL  PREVENT  TANK  FILL  AND/OR  LH2 
RECIRCULATION  AND  THEREBY  DELAY  LAUNCH.  FAILURE  DURING  TANK  FILL 
MAY  CAUSE  RUPTURE  OF  FEEDLINE  MANIFOLD,  RELEASING  LH2  AND 
CREATING  A FIRE/EXPLOSION  HAZARD.  FAILURE  DURING  ENGINE  BURN 
WILL  CUT  OFF  FUEL  FLOW  TO  THE  ENGINES,  RESULTING  IN  LOSS  OF 
VEHICLE.  NO  REDUNDANCY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-202 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/29/86 

MPS 

2262 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  FEED  DISCONNECT  VALVE  (PD2) 

FAILURE  MODE:  FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  FEED  (ORB/ET)  DISCONNECT  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


(ORBITER  HALF) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

1/1 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0051,  -0411,  -0431 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  WILL  ALLOW  THRUST  FROM  ESCAPING  H2  TO  ROTATE  THE  VEHICLE 
AFTER  ET  SEPARATION  AND  CAUSE  RECONTACT  WITH  THE  ET.  IMPACT 
COULD  CAUSE  LOSS  OF  VEHICLE  DIRECTLY  OR  DAMAGE  TO  TPS  TILES 
CAUSED  BY  IMPACT  MAY  DESTROY  THE  VEHICLE  DURING  ENTRY. 

RECONTACT  AFTER  RTLS  ET  SEP  IS  PREVENTED  BY  AERO  FORCES. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-203 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/29/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2263 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  FEED  DISCONNECT  VALVE  (PD2) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  PROPELLANT  FEED  SYSTEM 

LH2  FEED  (ORB/ET)  DISCONNECT  VALVE  (ORBITER  HALF) 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

1/1 

1/1 

3/3 

1/1 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0051,  -0411,  -0431 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 


S^^of^ISA  FIRE/EXPLOSION  HAZARD.  LEAKING  LH2  CAN  DAMAGE 
TPS  TILES  AND  CAUSE  LOSS  OF  VEHICLE  DURING  ENTRY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-204 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


SUBSYSTEM:  HIGHEST  CRITICALITY  HDW/FUMC 

MDiC  ID:  2271  SS?’  $ 

ITEM:  LH2  PREVALVE  (PV4,PV5,PV6) 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PRE VALVE  (3) 


SUBSYS  LEAD:  A.J.MARINO 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


REDUNDANCY  SCREENS: 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0006 


CRITICALITIES 


HDW/FUNC 

1/1 

1/1 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 

A [NA  ] 

B [NA  ] 

C [NA  ] 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

PRE IGNITION  FAILURE  WILL  PREVENT  ENGINE  START*  FAILURE  AFTER 

bxpwdeSTART  M1LL  deprive  the  engine  of  Sum 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-205 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


10/30/86 

MPS 

2272 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  PREVALVE  (PV4,PV5,PV6) 

FAILURE  MODE:  FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVE  (3) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0006 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

PREMATURE  OPENING  DURING  PRELAUNCH  MAY  CAUSE  LAUNCH  DELAY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-206 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/30/86 

MPS 

2273 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  LH2  PREVALVE  (PV4,PV5,PV6) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVE  (3) 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

1/1 

RTLS: 

1/1 

1/1 

TAL: 

1/1 

3/3 

AO  A: 

1/1 

3/3 

3/3 

ATO: 

1/1 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0006 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

DUMP^  K!RGE2  IS  A FIRE/EXPL0SI0N  HAZARD.  NO  HAZARD  AFTER 


REFERENCES:  VS70-41500X 


HDW/FUNC 

1/1 

1/1 


MPS 


REPORT  DATE  01/16/87 


C-207 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  MPS  FLIGHT;  1/1 

MDAC  ID;  2274  ABORT;  1/1 

ITEM;  LH2  PRE VALVE  (PV4,PV5,PV6) 

FAILURE  MODE;  FAIL  TO  RELIEVE 

LEAD  ANALYST;  W.J.MCNICOLL  SUBSYS  LEAD;  A.J. MARINO 

BREAKDOWN  HIERARCHY; 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PRE  VALVE  (3) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION;  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0006 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  COULD  ALLOW  PROPELLANT  FEEDLINE  TO  RUPTURE,  CAUSING 
DAMAGE  TO  OTHER  COMPONENTS  AND  POSSIBLE  DESTRUCTION  OF  THE 
VEHICLE.  NO  HAZARD  DURING  PERIODS  WHEN  THE  VALVE  IS  OPEN. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-208 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/30/86 

MPS 

2275 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  LH2  PREVALVE  (PV4,PV5,PV6) 

FAILURE  MODE:  ERRONEOUS  INDICATION 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

LH2 

SYSTEM 

2) 

LH2 

PROPELLANT  FEED  SYSTEM 

3) 

LH2 

PRE VALVE  (3) 

4) 

5) 

6) 

7) 

8) 

9) 

FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0396-0006 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87  C-209 


HDW/FUNC 

3/3 

3/3 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/30/86 

MPS 

2281 


HIGHEST  CRITICALITY  HDW/FUNC 

_ i/l 


FLIGHT: 

ABORT: 


1/1 

1/1 


LH2  17  INCH  ORBITER  DISCONNECT  TEST  PORT 


ITEM: 

(TP11,TP12) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  17  INCH  ORBITER  DISCONNECT  TEST  PORT  (2) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0389-0401,  -0431 

CAUSES:  CONTAMINATION,  VIBRATION,  PROCEDURAL  ERROR 

SKS'S'S"^ A FIRE/EXPLOSION  HAZARD.  NO  HAZARD  AFTER  MPS 
DUMP  & PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-210 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

1/1 

1/1 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  FEEDLINE  MANIFOLD 

4) 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM:  MPS 

MDAC  ID:  2291 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  LH2  FEEDLINE  MANIFOLD  (MA2) 

FAILURE  MODE:  RUPTURE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL: 

1/1 

AO  A: 

1/1 

ATO: 

1/1 

REDUNDANCY  SCREENS:  A [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0073-0005 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  OVERPRESSURIZATION 


EFFECTS/RATIONALE : 

THE  LINE  DURING  PRELAUNCH  WILL  ALLOW  LH2  TO  ESCAPE 
CREATING  A FIRE/EXPLOSION  HAZARD.  RUPTURE  DURING  POWERED  FLIGHT 

GINE  SHUTD0WH  « OP 

vtSJS?*  °^°RBIT  FAILURE  CAN  CAUSE  OUTRIGHT  DESTRUCTION  OF  THE 
VEHICLE  OR  DAMAGE  THAT  COULD  DESTROY  THE  VEHICLE  ON  ATTEMPTING  TO 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-211 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/31/86 

MPS 

2292 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  FEEDLINE  MANIFOLD  (MA2) 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  FEEDLINE  MANIFOLD 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0073-0005 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  DURING  PRELAUNCH  WILL  CAUSE  LAUNCH  DELAY.  FAILURE  DURING 
POWERED  FLIGHT  COULD  CAUSE  LOSS  OF  VEHICLE  BECAUSE  OF  INCORRECT 
PUMP  INLET  FLOW  CONDITIONS.  ENGINES  MAY  SHUT  DOWN  OR  EXPLODE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-212 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/19/86 

MPS 

2293 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  FEEDLINE  MANIFOLD  (MA2) 

FAILURE  MODE:  LOSS  OF  INSULATING  VACUUM 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  FEEDLINE  MANIFOLD 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  3/3 

ONORBIT:  3/3 

DEORBIT:  3/3 

LANDING/ S AFING : 3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0073-0005 

CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART 

FAILURE 

STRUCTURAL 

EFFECTS/RATIONALE : 

FAILURE  WOULD  ALLOW  LH2  TEMPERATURE  TO  INCREASE  DURING  PRESTART 
CONDITIONING.  IF  LH2  TEMPERATURE  IS  TOO  HIGH,  ENGINE  START  WILL 
BE  PREVENTED  AND  LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-213 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/30/86 

MPS 

2301 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  17  INCH  FEEDLINE  (FH7) 

FAILURE  MODE:  RUPTURE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J .MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  17  INCH  FEEDLINE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AO  A: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0073-0001 


CAUSES:  OVERPRESSURIZATION 


EFFECTS/RATIONALE : 

RUPTURE  OF  THE  LINE  DURING  PRELAUNCH  WILL  ALLOW  LH2  TO  ESCAPE, 
CREATING  A FIRE/EXPLOSION  HAZARD.  RUPTURE  DURING  POWERED  FLIGHT 
WILL  CAUSE  MULTIPLE  ENGINE  SHUTDOWN  OR  EXPLOSION  AND  LOSS  OF 
VEHICLE.  ONORBIT  FAILURE  CAN  CAUSE  OUTRIGHT  DESTRUCTION  OF  THE 
VEHICLE  OR  DAMAGE  THAT  COULD  DESTROY  THE  VEHICLE  ON  ATTEMPTING  TO 
LAND. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-214 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/31/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2302  ABORT:  1/1 

ITEM:  LH2  17  INCH  FEEDLINE  (FH7) 

FAILURE  MODE:  RESTRICTED  FLOW 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  17  INCH  FEEDLINE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0073-0001 


CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY.  FAILURE  DURING 
POWERED  FLIGHT  COULD  CAUSE  LOSS  OF  VEHICLE  FROM  ENGINE  EXPLOSION 
OR  SHUTDOWN  DUE  TO  VIOLATION  OF  TURBOPUMP  INLET  FLOW  CONDITION 
REQUIREMENTS . 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-215 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/19/86 

MPS 

2303 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  17  INCH  FEEDLINE  (FH7) 

FAILURE  MODE:  LOSS  OF  INSULATING  VACUUM 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

LH2  SYSTEM 

2) 

LH2  PROPELLANT  FEED  SYSTEM 

3) 

LH2  17  INCH  FEEDLINE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0073-0001 

CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

FAILURE  WOULD  ALLOW  LH2  TEMPERATURE  TO  INCREASE  DURING  PRESTART 
CONDITIONING.  IF  LH2  TEMPERATURE  IS  TOO  HIGH,  ENGINE  START  WILL 
BE  PREVENTED  AND  LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-216 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/30/86  HIGHEST  CRITICALITY 

SUBSYSTEM:  MPS  FLIGHT: 

MDAC  ID:  2311  ABORT: 

ITEM:  LH2  12  INCH  FEEDLINE  (FH8,FH9, FH10) 

FAILURE  MODE:  RUPTURE 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  12  INCH  FEEDLINE  (3) 

4) 

5) 

6) 

7) 

8) 

9) 


HDW/FUNC 

1/1 

1/1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

1/1 

AOA: 

DEORBIT: 

1/1 

ATO: 

LANDING/SAFING: 

1/1 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0073-0202, -0203,-0204,-0302,-0303-, 0304 

CAUSES:  OVERPRESSURIZATION 


EFFECTS/RATIONALE : 

RUPTURE  DURING  PRELAUNCH  CAN  DESTROY  THE  VEHICLE.  ESCAPING  LH2 
IS  A FIRE/EXPLOSION  HAZARD.  FAILURE  DURING  POWERED  FLIGHT  WILL 
CAUSE  ENGINE  SHUTDOWN  OR  EXPLOSION  AND  LOSS  OF  VEHICLE.  ONORBIT 
FAIHJRE  CAN  DESTROY  THE  VEHICLE  OUTRIGHT  OR  CAUSE  DAMAGE  THAT 
WILL  MAKE  A SAFE  LANDING  IMPOSSIBLE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-217 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/30/86 

MPS 

2312 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  12  INCH  FEEDLINE  (FH8,FH9,FH10) 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  12  INCH  FEEDLINE  (3) 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC271-0073-0202, -0203, -0204,-0302,-0303-, 0304 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  WILL  CAUSE  LAUNCH  DELAY.  FAILURE  DURING 
POWERED  FLIGHT  COULD  CAUSE  ENGINE  SHUTDDOWN  OR  ENGINE  EXPLOSION 
AND  LOSS  OF  VEHICLE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-218 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/19/86 

MPS 

2313 


HIGHEST  CRITICALITY  HDW/FUNC 


FLIGHT: 

ABORT: 


3/3 

3/3 


ITEM: 

FAILURE  MODE: 


LH2  12  INCH  FEEDLINE  (FH8,FH9,FH10) 
LOSS  OF  INSULATING  VACUUM 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  PROPELLANT  FEED  SYSTEM 
LH2  12  INCH  FEEDLINE  (3) 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AO  A: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 

MC27 1-007 3 -02 02, -0203,-0204,-0302, -0303- , 0304 


CAUSES:  MECHANICAL  SHOCK,  VIBRATION,  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

FAILURE  WOULD  ALLOW  LH2  TEMPERATURE  TO  INCREASE  DURING  PRESTART 
CONDITIONING.  IF  LH2  TEMPERATURE  IS  TOO  HIGH,  ENGINE  START  WILL 
BE  PREVENTED  AND  LAUNCH  WILL  BE  DELAYED. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-219 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  11/05/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  MPS  FLIGHT:  1/1 

MDAC  ID:  2321  ABORT:  1/1 

ITEM:  LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV8) 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

/NA 

1/1 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0406-0002 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  AT  MECO  WILL  ALLOW  PRESSURE  IN  THE  PROPELLANT 
MANIFOLD  AND  LINES  TO  INCREASE  AND  CAUSE  THE  LINE  TO  BURST  AND 
DESTROY  THE  VEHICLE. 

VALVE  IS  NOT  REQUIRED  TO  OPEN  PRELAUNCH. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-220 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/05/86 

MPS 

2322 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV8) 

FAILURE  MODE:  FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

1/1 

RTLS: 

1/1 

1/1 

TAL: 

1/1 

3/3 

AOA: 

1/1 

3/3 

3/3 

ATO: 

1/1 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0406-0002 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  WILL  ALLOW  LH2  TO  ESCAPE  THE  VEHICLE  THROUGH  THE  FEEDLINE 
RELIEF  VALVE  AFTER  MAIN  ENGINE  START,  CREATING  A FIRE/ EXPLOSION 
HAZARD • 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-221 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/05/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  2323  ABORT:  1/1 

ITEM:  LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV8) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-04 06-0002 

CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  LH2  IS  A FIRE/EXPLOSION  HAZARD. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-222 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/05/86 

MPS 

2331 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  1/1 


ITEM:  LH2  FEEDLINE  RELIEF  LINE  TEST  PORT  (TP25) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  LINE  TEST  PORT 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/3 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415426-001 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL 

ERROR 


EFFECTS/RATIONALE : 

SINCE  MPS  DUMP  IS  ONLY  A PARTIAL  ONE  FOR  RTLS  AND  TAL  ABORTS,  THE 
FAILURE  WILL  ALLOW  LEAKAGE  OF  LH2/GH2  AND  CREATE  A FIRE/EXPLOSION 
HAZARD  DURING  RTLS  AND  TAL  ENTRY,  LANDING  AND  POST-LANDING. 

SINCE  THE  FEEDLINE  RELIEF  VALVE  IS  OPENED  AT  MECO,  THERE 

IS  NO  DANGER  PRIOR  TO  MECO.  NO  DANGER  AFTER  A COMPLETE  MPS  DUMP 

& PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-223 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/05/86 

MPS 

2341 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  FEEDLINE  MANIFOLD  RELIEF  VALVE  (RV6) 

FAILURE  MODE:  FAIL  TO  OPEN  (RELIEVE) 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  MANIFOLD  RELIEF  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0501-0002 

CAUSES : CONTAM INATI ON 


EFFECTS/RATIONALE : 

FAILURE  WILL  ALLOW  PRESSURE  TO  INCREASE  IN  THE  FEEDLINE  MANIFOLD 
UNTIL  IT  BURSTS  AND  THE  VEHICLE  WILL  BE  DESTROYED. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-224 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/05/86 

MPS 

2342 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  FEEDLINE  MANIFOLD  RELIEF  VALVE  (RV6) 

FAILURE  MODE:  FAIL  TO  REMAIN  CLOSED,  INTERNAL  LEAKAGE,  FAIL  TO 

CLOSE  (RESEAT) 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  MANIFOLD  RELIEF  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0501-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  IS  NOT  A HAZARD.  THE  RELIEF  VALVE  HAS  NO  HYDROGEN 
PRESSURE  ON  IT  UNTIL  THE  ISOLATION  VALVE  IS  OPENED  AT  MECO. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-225 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/05/86 

MPS 

2343 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LEAD  ANALYST:  W.J.MCNICOLL 


LH2  FEEDLINE  MANIFOLD  RELIEF  VALVE  (RV6) 
EXTERNAL  LEAKAGE 

SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  DUMP  SYSTEM 

LH2  FEEDLINE  MANIFOLD  RELIEF  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ S AFING : 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


REDUNDANCY  SCREENS:  A [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0501-0002 

CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 

SS^^JotT^zard.  the  relief  valve  has  ho  hydrogen 

PRESSURE  ON  IT  UNTIL  THE  ISOLATION  VALVE  IS  OPENED  AT  MECO. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-226 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2351 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  LH2  DUMP  PRESSURIZATION  ORIFICE  /ppi n\ 

FAILURE  MODE:  RESTRICTED  FLOW  ORIFICE  (RP10) 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  DUMP  SYSTEM 

3)  LH2  DUMP  PRESSURIZATION  ORIFICE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


LANDING/SAFING:  3/3 


CRITICALITIES 
HDW/FUNC  ABORT 

/NA  RTLS: 

3/3  TAL: 

3/3  AOA: 

3/3  ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415135-001 

CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

OF  P ^ ^LI NES°*dURI NG  ^ORb'i TAL  OPERATIONS^  SE°°ND  VAC“UM  IMERTI1,= 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-227 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2352 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  DUMP  PRESSURIZATION  ORIFICE  (RP10) 

FAILURE  MODE:  EXTERNAL  LEAK 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  DUMP  SYSTEM 

3)  LH2  DUMP  PRESSURIZATION  ORIFICE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415135-001 


CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  HYDROGEN  WILL  CREATE  A FIRE/EXPLOSION  HAZARD. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-228 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2361 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  LH2  FEEDLINE  RELIEF  FLAME  ARRESTOR  (FL1) 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  FLAME  ARRESTOR 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-451430-004 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 
FAILURE  IS  NOT  A HAZARD. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87  C-229 


HDW/FUNC 

3/3 

3/3 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/07/86 

SUBSYSTEM:  MPS 

MDAC  ID:  2371 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  PRESSURIZATION  LINE  VENT  VALVE  (LV52) 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  HYDROGEN  VACUUM  INERTING  SYSTEM 

3)  LH2  PRESSURIZATION  LINE  VENT  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0002 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  DOES  NOT  CREATE  A HAZARDOUS  CONDITION.  GASEOUS  HYDROGEN 
WILL  BE  TRAPPED  IN  THE  ET  PRESSURIZATION  MANIFOLD. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-230 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2372 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


LH2  PRESSURIZATION  LINE  VENT  VALVE  (LV52) 
FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

HYDROGEN  VACUUM  INERTING  SYSTEM 
LH2  PRESSURIZATION  LINE  VENT  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
MC2 8 4 -04 03 -0002 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  DOES  NOT  CREATE  A HAZARDOUS  CONDITION. 


REFERENCES:  VS70-41500X 


HDW/FUNC 

3/3 

3/3 


REPORT  DATE  01/16/87 


C-231 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2373 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  PRESSURIZATION  LINE  VENT  VALVE  (LV52) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  HYDROGEN  VACUUM  INERTING  SYSTEM 

3)  LH2  PRESSURIZATION  LINE  VENT  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  H2  IS  A FIRE/EXPLOSION  HAZARD.  NO  HAZARD  AFTER  MPS 
DUMP  & PURGE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-232 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2381 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  1/1 


ITEM:  LH2  FEED  RTLS  INBOARD  VALVE  (PV17) 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RTLS  DUMP  SYSTEM 

3)  LH2  FEED  RTLS  INBOARD  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0023, -0033,-0043,-0053 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  WILL  PREVENT  DUMP  OF  LH2  DURING  RTLS.  HYDROGEN  WILL  VENT 
THROUGH  THE  RELIEF  VALVE  DURING  DESCENT  AND  LANDING,  CREATING  A 
FIRE/EXPLOSION  HAZARD.  NO  HAZARD  IN  ANY  OTHER  PHASE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-233 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2382 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  LH2  FEED  RTLS  INBOARD  VALVE  (PV17) 

FAILURE  MODE:  FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RTLS  DUMP  SYSTEM 

3)  LH2  FEED  RTLS  INBOARD  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A ( 2 ] 

B [ F ] 

C ( F ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0023, 

-0033,-0043,-0053 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  OF  A REDUNDANT  COMPONENT  (OUTBOARD  VALVE)  WILL  ALLOW  LH2 
TO  ESCAPE  THE  VEHICLE  CREATING  A FIRE/EXPLOSION  HAZARD.  LOSS  OF 
LH2  WILL  CAUSE  ENGINES  TO  SHUT  DOWN  EARLY,  RESULTING  IN  LOSS  OF 
VEHICLE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-234 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2383 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  LH2  FEED  RTLS  INBOARD  VALVE  (PV17) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RTLS  DUMP  SYSTEM 

3)  LH2  FEED  RTLS  INBOARD  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0023, -0033, -0043,-0053 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LEAKAGE  OF  LH2  IS  A FIRE/EXPLOSION  HAZARD. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87  C-235 


HDW/FUNC 

1/1 

1/1 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2391 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  1/1 


ITEM:  LH2  FEED  RTLS  OUTBOARD  VALVE  (PV18) 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  REMAIN  OPEN 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RTLS  DUMP  SYSTEM 

3)  LH2  FEED  RTLS  OUTBOARD  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

1/1 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0024, 

-0034,-0044,-0054 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  WILL  PREVENT  DUMP  OF  LH2  DURING  RTLS.  HYDROGEN  WILL  VENT 
THROUGH  THE  RELIEF  VALVE  DURING  DESCENT  AND  LANDING,  CREATING  A 
FIRE/EXPLOSION  HAZARD.  NO  HAZARD  IN  ANY  OTHER  PHASE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-236 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2392 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


LH2  FEED  RTLS  OUTBOARD  VALVE  (PV18) 
FAIL  TO  CLOSE,  FAIL  TO  REMAIN  CLOSED 


LEAD  ANALYST:  W.J.MCNICOLL 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

LH2  RTLS  DUMP  SYSTEM 
LH2  FEED  RTLS  OUTBOARD  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

2/1R 

2/1R 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ F ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0024, -0034, -0044, -0054 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  OF  A REDUNDANT  COMPONENT  (INBOARD  VALVE)  WILL  ALLOW  LH2 
TO  ESCAPE  THE  VEHICLE  AND  CREATE  A FIRE/EXPLOSION  HAZARD.  LOSS 
OF  LH2  WILL  CAUSE  ENGINES  TO  SHUT  DOWN  EARLY,  RESULTING  IN  LOSS 
OF  VEHICLE. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-237 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

2393 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


LH2  FEED  RTLS  OUTBOARD  VALVE  (PV18) 
EXTERNAL  LEAKAGE 


LEAD  ANALYST:  W.J.MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  LH2  SYSTEM 

2)  LH2  RTLS  DUMP  SYSTEM 

3)  LH2  FEED  RTLS  OUTBOARD  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING : 
REDUNDANCY  SCREENS: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0395-0024, 

-0034,-0044,-0054 

CAUSES:  MECHANICAL  SHOCK,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE: 

LEAKAGE  OF  LH2  IS  A FIRE/EXPI^SION  HAZARD. 


REFERENCES:  VS70-41500X 


REPORT  DATE  01/16/87 


C-238 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/08/86 

MPS 

3010 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

1/1R 


ITEM: 

FAILURE  MODE: 


ENGINE  HELIUM  SUPPLY  CHECK  VALVE 
FAILS  TO  CLOSE,  OR  REMAIN  CLOSED 


( CV 1 , CV  2 , C V 3 ) 


LEAD  ANALYST:  M.L.MCNEELY 

BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  El,  2,  3 HELIUM  SUPPLY 

3)  CHECK  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


SUBSYS  LEAD:  A.J.MARINO 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  ME284-0472-0002 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  POPPET  SEAT  FAILURE,  CONTAMINATION,  SPRING  BREAKAGE 

EFFECTS/RATIONALE : 

TWO  SEPARATE  FAILURES  OF  UNLIKE  PARTS  MUST  OCCUR  FOR  T.n<3<;  op 
HELIUM  TO  AM  ENGINE  FROM  THE  SUPPLY VIA  THIS PATH?  lSX  o?  AT  T 
RETONDANCY  MAY  RESULT  IN  THE  LOSS  OF  HELIUM  TO  AN  ENGINE  CAUSING 


REFERENCES:  RI  MAIN  PROPULSION  SYSTEM  SCHEMATICS 

007  & 008 * FOSTER  SYS'S.  BRIEFS,  JSC-19401 
SPEC  DWG  FOR  ME284-0472  PARTS. 


VS70-415001, 

1 -OCT. 1984 ; RI 


REPORT  DATE  01/16/87 


C-239 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/08/86 

MPS 

3011 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


ENGINE  HELIUM  SUPPLY  CHECK  VALVE  (CV1,CV2,CV3) 
FAILS  TO  OPEN 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  El,  2,  3 HELIUM  SUPPLY 

3)  CHECK  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  ME284-0472-0002 


CAUSES:  BLOCKAGE  (GROSS  CONTAMINATION) 

EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  PREVENTS  PRESSURIZATION  OF  AN  ENGINE  HELIUM 
SUPPLY  TANK  WHICH  IS  EASILY  DETECTABLE  DURING  PRELAUNCH.  FAILURE 
TO  OPEN  AT  ANY  OTHER  TIME  HAS  NO  EFFECT. 


REFERENCES:  RI  MAIN  PROPULSION  SYSTEM  SCHEMATICS,  VS70-415001, 

006,  007  & 008.  BOOSTER  SYS'S.  BRIEFS,  JSC-19401,  1-OCT.1984;  RI 

SPEC  DWG  FOR  ME284-0472  PARTS. 


REPORT  DATE  01/16/87 


C-240 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/08/86 

MPS 

3020 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

2/1R 


ITEM:  HELIUM  SUPPLY  DISCONNECT (ORB/GND,  ORB  HALF) , (PD8) 

FAILURE  MODE:  FAILS  TO  CLOSE,  OR  REMAIN  CLOSED 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  INLET  BOTTLE  SUPPLY  FROM  GSE 

3)  ORBITER  HALF  DISCONNECT 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  LEFT  T-0  UMBILICAL  PANEL 

PART  NUMBER:  MC2 76-0003 -0006  (TYPE  I) 


CAUSES:  POPPET  SEAT  FAILURE,  CONTAMINATION,  SPRING  BREAKAGE 

EFFECTS/RATIONALE : 

TWO  SEPARATE  FAILURES  OF  UNLIKE  PARTS  MUST  OCCUR  (CV1-3  AND  PD-8 
POPPET  SEAT)  FOR  LOSS  OF  HELIUM  FROM  THE  SUPPLY  TANK  THROUGH  THE 
DISCONNECT.  LOSS  OF  ALL  REDUNDANCY  MAY  RESULT  IN  THE  LOSS  OF 
HELIUM  TO  AN  ENGINE  CAUSING  SHUTDOWN. 


REFERENCES:  RI  MAIN  PROPULSION  SYS.  SCHEMATIC,  VS70-41500X;  RI 
SPEC  DWG  FOR  MC276-0003  PARTS;  BOOSTER  SYSTEM  BRIEFS,  JSC19401, 
1-OCT. 1984 . 


REPORT  DATE  01/16/87 


C-241 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/08/86 

MPS 

3021 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

2/1R 


ITEM:  HELIUM  SUPPLY  DISCONNECT  (ORB/GND,  ORB  HALF) , 

(PD8) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  INLET  BOTTLE  SUPPLY  FROM  GSE 

3)  ORBITER  HALF  DISCONNECT 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

c [ p ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC276-0003-0006  (TYPE  1) 

CAUSES:  SWIVEL  SEAL  FAILURE;  SCRATCHED  OR  GOUGED  SWIVEL  AT  SEAL 

INTERFACE 

EFFECTS/RATIONALE : 

TWO  SEPARATE  FAILURES  OF  UNLIKE  PARTS  MUST  OCCUR  (CV1-3  AND  PD-8 
SWIVEL  SEAL)  FOR  LOSS  OF  HELIUM  FROM  THE  SUPPLY  TANK  THROUGH  THE 
DISCONNECT.  LOSS  OF  ALL  REDUNDANCY  MAY  RESULT  IN  THE  LOSS  OF 
HELIUM  TO  AN  ENGINE  CAUSING  SHUTDOWN. 


REFERENCES:  RI  MAIN  PROPULSION  SYS.  SCHEMATIC,  VS70-41500X;  RI 
SPEC  DWG  FOR  MC276-0003  PARTS;  BOOSTER  SYSTEM  BRIEFS,  JSC19401, 
1-OCT. 1984 . 


REPORT  DATE  01/16/87 


C-242 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/09/86 

SUBSYSTEM:  MPS 

MDAC  ID:  3030 


ITEM:  TEST  PORT  (TP8) 

FAILURE  MODE:  LEAKAGE 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

HELIUM  SYSTEM 

2) 

HELIUM  FILL  LINE 

3) 

TEST  PORT 

4) 

5) 

6) 

7) 

8) 

9) 

FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  V070-415585-002 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  SEAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  OF  THE  SEAL  AT  THE  TEST  PORT  (TP8)  PLUG  IS  FUNCTIONALLY 
THE  SAME  AS  THE  QD  (PD8)  POPPET  OR  EXTERNAL  LEAKAGE  FAILURES 
TWO  SEPARATE  FAILURES  OF  UNLIKE  PARTS  MUST  OCCUR  (CV1-3  AND  THE 
TP-8  SEAL)  FOR  LOSS  OF  HELIUM  FROM  THE  SUPPLY  TANK.  LOSS  OF 
ALL  REDUNDANCY  MAY  RESULT  IN  LOSS  OF  HELIUM  SUPPLY  TO  AN  ENGINE. 


REFERENCES:  RI  MPS  SCHEMATICS,  VS70-41500X;  RI  SPEC  DWG  V070- 

415585-002 


REPORT  DATE  01/16/87 


C-243 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/09/86 

MPS 

3040 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


17.3  CU.  FT.  HELIUM  SUPPLY  TANK  (TK6,  8,  10) 
RAPID  LEAK 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  HELIUM  SUPPLY  TANKS 

3)  17.3  FT 3 TANK 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B 

[NA  ] 

C [NA  ] 

LOCATION:  PAYLOAD 

BAY?  UNDER 

PLB 

LINER 

PART  NUMBER:  MC282-0082-0001 


CAUSES:  MANUFACTURING  DEFECT,  FATIGUE  AT  WELD  JOINT,  SEAL 

FAILURE 


EFFECTS/RATIONALE : 

RAPID  LOSS  OF  HELIUM  MAY  LEAD  TO  LOSS  OF  AN  ENGINE  DURING  ASCENT. 
TANKS  INSTALLED  UNDER  PAYLOAD  BAY  LINER.  MAY  REQUIRE  REMOVAL  OF 
PAYLOADS  FOR  ACCESS  IF  LEAKAGE  IS  ISOLATED  BEFORE  FLIGHT. 


REFERENCES:  RI  MPS  SCHEMATIC  VS7041500X;  RI  SPEC  DWG  MC284-0082 


REPORT  DATE  01/16/87 


C-244 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

10/09/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

MPS 

FLIGHT: 

2/2 

MDAC  ID: 

3050 

ABORT: 

1/1 

ITEM: 

4.7  CU. 

FT.  HELIUM  SUPPLY  TANK  (TK1,2,3, 

7,9,11) 

FAILURE  MODE:  RAPID  LEAK 

LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  HELIUM 

2)  HELIUM  SUPPLY  TANKS 

3)  4.7  CU.  FT.  SIZE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  UNDER  PAYLOAD  BAY  LINER  & AFT  COMPARTMENT 

PART  NUMBER:  MC282-0082-0010 


CAUSES:  MANUFACTURING  DEFECT,  FATIGUE  AT  WELD  JOINT,  SEAL 

FAILURE 

EFFECTS/RATIONALE : 

RAPID  LOSS  OF  HELIUM  MAY  LEAD  TO  LOSS  OF  AN  SSME  ENGINE  DURING 
POWERED  FLIGHT.  TANKS  7,  9,  11  LOCATED  UNDER  PAYLOAD  BAY  LINER. 
MAY  REQUIRE  PAYLOAD  REMOVAL  FOR  ACCESS  IF  LEAKAGE  IS  ISOLATED 
BEFORE  FLIGHT. 


REFERENCES:  RI  MPS  SCHEMATIC  VS70-41500X,  RI  SPEC  DWG  MC282-0082 


REPORT  DATE  01/16/87 


C-245 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/09/86 

MPS 

3060 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/2 

1/1 


ITEM: 

FAILURE  MODE: 


PRESSURE  TAP  PORT  (TP26,27,28) 
RAPID  LEAK 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SYSTEM 

ENGINE  HELIUM  SUPPLY 
TEST  PORT 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  2/2 

ONORBIT:  3/3 

DEORBIT:  3/3 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [NA  ] 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION: 
PART  NUMBER: 


AFT  COMPARTMENT 
V07 0-4 15790-001 


CAUSES:  SEAL  FAILURE 

EFFECTS/RATIONALE:  % 

FAILURE  OF  THE  SEAL  AT  THE  TEST  PORT  (TP26,  27  OR  28)  IS 
FUNCTIONALLY  THE  SAME  AS  A RAPID  LEAK  IN  A HELIUM  SUPPLY  TANK. 
LOSS  OF  ALL  REDUNDANCY  MAY  RESULT  IN  LOSS  OF  HELIUM  SUPPLY  TO  AN 

ENGINE. 


REFERENCES:  RI  MPS  SCHEMATIC,  VS70-41500X;  RI  SPEC  DWG  V070- 

415790-001 


REPORT  DATE  01/16/87 


C-246 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

3/3 

3/3 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  HELIUM  SYSTEM 

2)  ENGINE  HELIUM  SUPPLY  REG  INLET 

3)  CHECK  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/09/86 

MPS 

3070 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  ENGINE  HELIUM  SUPPLY  CHECK  VALVE 

(CV25,26;36,37;41,42) 

FAILURE  MODE:  FAILS  TO  CLOSE,  OR  REMAIN  CLOSED 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  ME284-0472-0002 


CAUSES:  POPPET  SEAT  FAILURE,  CONTAMINATION,  SPRING  BREAKAGE 

EFFECTS/RATIONALE : 

CHECK  VALVE  IS  NORMALLY  OPEN  DURING  ENGINE  OPERATION  FATIiTNr  Tn 

^OSEISA  MODE  ONLY  CONSIDERED  AFTER  LOsS  OF  HE  LICK  IN  ONE 

CT^DTV  F0LL0WED  BY  AN  ATTEMPT  TO  INTERCONNECT  FROM  ANOTHER* 

SUPPLY • 


REFERENCES:  RI  MPS  SCHEMATIC  VS70-41500X;  RI  SPEC  DWG  MC284- 

0472)  BOOSTER  SYS.  BRIEFS,  JSC  19401,  1-OCT.1984. 


REPORT  DATE  01/16/87 


C-247 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/09/86 

MPS 

3071 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  ENGINE  HELIUM  SUPPLY  CHECK  VALVE 

(CV25,26;36,37?41,42) 

FAILURE  MODE:  FAILS  TO  OPEN,  OR  REMAIN  OPEN 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SYSTEM 

2)  ENGINE  HELIUM  SUPPLY  REG  INLET 

3)  CHECK  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  ME2 8 4 -04 7 2 -00 02 

CAUSES:  GROSS  CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  OF  EITHER  CHECK  VALVE  IN  THE  REDUNDANT  REG  PATHS  IS  NOT 
DETECTABLE  DURING  THE  HELIUM  USAGE  PERIOD.  ONLY  WHEN  BOTH  FAIL 
IS  THE  LOSS  OF  REDUNDANCY  APPARENT. 


REFERENCES:  RI  MPS  SCHEMATIC  VS70-41500X?  RI  SPEC  DWG  MC284- 

0472?  BOOSTER  SYS.  BRIEFS,  JSC  19401,  1-OCT.1984. 


REPORT  DATE  01/16/87 


C-248 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/09/86 

SUBSYSTEM:  MPS 

MDAC  ID:  3080 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  ENGINE  HELIUM  SUPPLY  FILTER  - PANEL  A;B 

( FL2 ,6;3,7;4,8) 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  FILTER 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/2R 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  ME286-0056-0001 

CAUSES:  GROSS  CONTAMINATION 


EFFECTS/RATIONALE : 

RESTRICTED  FLOW  OR  BLOCKAGE  MAY  BE  INDICATED  BY  REG  OUT  PRESSURE 
V41P1(X)54,  (PANEL  A),  V41P1(X)53,  (PANEL  B)  DEGRADED  OR  ZERO. 
HOWEVER,  REG  PRESSURE  AS  STATED  IS  NOT  DEFINITIVE  FOR  THIS  FILTER 
FAILURE  MODE. 


REFERENCES:  RI  MPS  SCHEMATIC,  VS7041500X?  RI  SPEC  DWG  ME286- 

0056. 


REPORT  DATE  01/16/87 


C-249 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/2R 
2/1R 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,  B 

3)  FILTER 

4) 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

3081 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  ENGINE  HELIUM  SUPPLY  FILTER  - PANEL  A;B 

(FL2 , 6 ; 3 , 7 ; 4 , 8) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A. J. MARINO 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  ME286-0056-0001 


CAUSES:  SEAL  FAILURE 

EFFECTS/RATIONALE : 

TWO  SEPARATE  SEALS  (PER  FILTER)  MUST  FAIL  FOR  EXTERNAL  LEAKAGE  TO 
OCCUR.  LEAKAGE  AT  THIS  POINT  CANNOT  BE  DISTINGUISHED  FROM 
LEAKAGE  ABOVE  THE  PANEL  A INLET  CHECK  VALVE  (CV26, 37, 42) , OR 
PANEL  B (CV25, 36, 41) . 


REFERENCES:  RI  MPS  SCHEMATIC,  VS7041500X;  RI  SPEC  DWG  ME286- 

0056. 


REPORT  DATE  01/16/87 


C-250 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

3082 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM:  ENGINE  HELIUM  SUPPLY  FILTER  - PANEL  A;B 

(FL2,6;3,7?4,8) 

FAILURE  MODE:  STRUCTURAL  FAILURE  (ELEMENT  COLLAPSE) 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,  B 

3)  FILTER 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

2/2 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

IOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  ME286-0056-0001 


CAUSES:  HIGH  DELTA  P ACROSS  THE  ELEMENT  CAUSED  BY  GROSS 

CONTAMINATION. 


EFFECTS/RATIONALE : 

POSSIBLE  CONTAMINATION  OF  ALL  DOWNSTREAM  COMPONENTS.  WORST  CASE 
EFFECTS  CAUSE  ENGINE  SHUTDOWN.  ELEMENT  DESIGN  DELTA  P 
REQUIREMENT  IS  25%  OF  THE  OPERATING  PRESSURE  (MINIMUM)  OR  1125 
PSID.  WORST  CASE  DELTA  P COULD  BE  AS  HIGH  AS  4500  PSID. 


REFERENCES:  RI  MPS  SCHEMATIC,  VS7041500X;  RI  SPEC  DWG  ME286- 

0056. 


C 


u 


REPORT  DATE  01/16/87 


C-251 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  10/10/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/2R 

MDAC  ID:  3090  ABORT:  3/1R 

ITEM:  ENGINE  HELIUM  SUPPLY  ISOLATION  VALVE 

(LV1,2;3,4;5,6) 

FAILURE  MODE:  FAILS  TO  OPEN,  OR  REMAIN  OPEN 

LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  ISOLATION  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0403-0017  (099,1034104);  -0007  (102)  (TYPE  V) 

CAUSES:  FAILURE  TO  VENT  CLOSING  PRESSURE  THRU  PILOT  BALL  & UPPER 

SEAT?  FAILURE  TO  SEAL  INLET  PRESSURE  FROM  REFERENCE  CAVITY?  LOSS 
OF  ELECTRICAL  SIGNAL?  LOSS  OF  COMMAND  SIGNAL  (ENTRY  PURGE) 

EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  OR  REMAIN  OPEN  IS  EASILY  RECOGNIZABLE.  SHOULD 
THE  VALVE  FAIL  TO  REMAIN  OPEN  DURING  ENGINE  OPERATION  A REDUNDANT 
SUPPLY  ROUTE  IS  AVAILABLE,  BUT  ONLY  ONE  FAILURE  AWAY  FROM  LOSS  OF 
AN  ENGINE  FROM  LOSS  OF  HELIUM  (MISSION  FAILURE).  DURING 
ABORTS,  SHOULD  THIS  SCENARIO  OCCUR,  LOSS  OF  THE  2ND  ENGINE  (SEE 
MPS  GRs)  RESULTS  IN  LOSS  OF  VEHICLE  AND  CREW. 

REFERENCES:  RI  MPS  SCHEMATIC,  VS70-415001  (102);  VS70-41500X. 

RI  SPEC  DWG  MC284-0403.  BOOSTER  SYSTEM  BRIEFS,  JSC  19041,  1-OCT- 
84. 


REPORT  DATE  01/16/87 


C-252 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

3091 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  ENGINE  HELIUM  SUPPLY  ISOLATION  VALVE 

( LV1 , 2 ? 3 , 4 ; 5 , 6 ) 

FAILURE  MODE:  FAILS  TO  CLOSE,  GROSS  INTERNAL  LEAKAGE. 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  ISOLATION  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ S AFING : 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0403-0017 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


B [NA  ] C [NA  ] 


(099, 103&104) ? -0007  (102)  (TYPE  V) 


CAUSES:  PLUGGED  INTERNAL  FILTER;  PUSH  ROD  PIN  BROKEN;  MAIN  PILOT 

SPRING  OR  MAIN  POPPET  SPRING  BROKEN;  DAMAGED  MAIN  POPPET  SEAL 


EFFECTS/RATIONALE : 

FAILURE  TO  CLOSE  HAS  NO  EFFECT  UNLESS  FOLLOWED  BY  A FAILURE 
DOWNSTREAM  DUE  TO  LEAKAGE  OF  OTHER  PARTS. 


REFERENCES:  RI  MPS  SCHEMATIC,  VS70-415001  (102);  VS70-41500X. 

RI  SPEC  DWG  MC284-0403.  BOOSTER  SYSTEM  BRIEFS,  JSC  19041,  1-OCT- 


REPORT  DATE  01/16/87 


C-253 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
2/2 
1/1 

ITEM;  ENGINE  HELIUM  SUPPLY  ISOLATION  VALVE 

(LV1, 2 ; 3 , 4 ; 5 , 6) 

FAILURE  MODE;  EXTERNAL  LEAKAGE 

LEAD  ANALYST;  M.L.MCNEELY  SUBSYS  LEAD;  A.J.MARINO 


DATE: 

SUBSYSTEM;  MPS 
MDAC  ID:  3092 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN  HIERARCHY; 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  ISOLATION  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0403-0017  (099,1034104);  -0007  (102)  (TYPE  V) 


CAUSES:  FAILURE  OF  METAL  'V'  SEALS  OR  SOLENOID  ASSEMBLY  SEALS 


EFFECTS/RATIONALE : 

GROSS  LEAKAGE  RESULTS  IN  LOSS  OF  ENGINE  HELIUM  SUPPLY  TO  A GIVEN 
ENGINE.  WORST  CASE  LEAKAGE  MAY  RESULT  IN  ENGINE  SHUTDOWN  DUE  TO 
LOSS  OF  HELIUM  PURGE.  CROSSOVER  OF  OTHER  ENGINE  HELIUM  SUPPLIES 
OR  PNEUMATIC  HELIUM  SUPPLY  VIA  INLET/OUTLET  PATH  ONLY  FEEDS 
THE  LEAK.  CROSSOVER  (LV10)  FROM  THE  PNEUMATIC  SUPPLY  TO  ENGINE 
#2  DOWNSTREAM  OF  THE  LEAK  IS  A SOLUTION,  BUT  ONLY  FOR  #2  ENGINE. 
HOWEVER,  LOCATION  OF  ANY  LEAK  IS  IMPOSSIBLE  DURING  POWERED 
FLIGHT. 


REFERENCES:  RI  MPS  SCHEMATIC,  VS70-415001  (102);  VS70-41500X. 

RI  SPEC  DWG  MC284-0403.  BOOSTER  SYSTEM  BRIEFS,  JSC  19041,  1-OCT- 
84. 


REPORT  DATE  01/16/87 


C-254 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/14/86 

MPS 

3110 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 
(LO) 


ENGINE  HELIUM  PRESSURE  REGULATOR  (PR1,7;2,8;3,9) 
FAILS  TO  OPEN,  REMAIN  OPEN,  FAILS  OUT  OF  TOLERANCE 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

ENGINE  HELIUM  REG  PANEL  A,B 
PRESSURE  REGULATOR 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/2R 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

IOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0533-0004 

CAUSES:  CONTAMINATION  OF  THE  PILOT  POPPET  ASSEMBLY 

EFFECTS/RATIONALE : 

REG  OUTLET  PRESSURE  AT  ZERO  OR  DEGRADED  BELOW  715  PSI  IS  EASILY 
DETECTED.  NO  ACTION  IS  NECESSARY  AS  A REDUNDANT  PATH  IS 
AVAILABLE.  ENGINE  #2  IS  UNIQUE  IN  THAT  AN  ADDITIONAL  PATH  IS 
AVAILABLE  DOWNSTREAM  OF  THE  FAILED  REGULATOR,  HOWEVER,  THE 
CRITICALITY  FOR  ENGINE  #2  IS  NOT  DIFFERENT  FROM  ENGINES  #1  AND 


REFERENCES:  RI  MAIN  PROPULSION  SYS  SCHEMATIC  V2 7 0-4 150 OX; 

BOOSTER  SYSTEM  BRIEFS,  JSC-19401,  l-OCT-84;  RI  SPEC  DWG  FOR 
MC284-0533. 


REPORT  DATE  01/16/87 


C-255 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/14/86 

MPS 

3111 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM:  ENGINE  HELIUM  PRESSURE  REGULATOR  (PR1,7;2,8;3,9) 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE  (HIGH) 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  PRESSURE  REGULATOR 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0533-0004 

CAUSES:  REFERENCE  PRESSURE  AND  PILOT  FAIL  TO  SENSE  DOWNSTREAM 

DEMAND  CHANGES?  CONTAMINATION  OF  PILOT  ASSEMBLY. 


EFFECTS/RATIONALE : 

REGULATOR  OUTLET  PRESSURE  PERMANENTLY  RISES  ABOVE  DOWNSTREAM 
RELIEF  VALVE  SETTING.  FAILURE  MAY  RESULT  IN  IX5SS  OF  ENGINE 
HELIUM  THROUGH  THE  OPEN  RELIEF  VALVE. 


REFERENCES:  RI  MAIN  PROPULSION  SYS  SCHEMATIC  V270-41500X; 

BOOSTER  SYSTEM  BRIEFS,  JSC-19401,  l-OCT-84?  RI  SPEC  DWG  FOR 
MC284-0533. 


REPORT  DATE  01/16/87 


C-256 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM:  MPS 

MDAC  ID:  3112 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/2 

1/1 


ITEM:  ENGINE  HELIUM  PRESSURE  REGULATOR  (PR1,7;2,8;3,9) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  PRESSURE  REGULATOR 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/2 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0533-0004 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


CAUSES:  SEAL  FAILURE  INTERNALLY  OR  AT  REGULATOR  PORTS 

EFFECTS/RATIONALE : 

GROSS  LEAKAGE  MAY  RESULT  IN  LOSS  OF  ENGINE  HELIUM. 


REFERENCES:  RI  MAIN  PROPULSION  SYS  SCHEMATIC  V270-41500X; 

BOOSTER  SYSTEM  BRIEFS,  JSC-19401,  l-OCT-84?  RI  SPEC  DWG  FOR 
MC284-0533 . 


REPORT  DATE  01/16/87 


C-257 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/22/86 

MPS 

3120 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


ENGINE  HE  RELIEF  VALVE  PANEL  A?B  (RV1,8?2,9?3,10) 
FAILS  TO  CLOSE  (RESEAT),  OR  REMAIN  CLOSED 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  RELIEF  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/2 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 


LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0398-0005  (OV099, 103,104)  ? -0004  (OV102) 


CAUSES:  MAIN  POPPET  SEAT  FAILURE;  PILOT  POPPET,  MAIN  POPPET  OR 

POPPET  SEAT  PISTON  SPRING  FAILURE. 


EFFECTS/RATIONALE : 

FAILURE  TO  CLOSE  OR  RESEAT  FIRST  REQUIRES  A FAILURE  (OPEN)  OF  THE 
UPSTREAM  REGULATOR  ALLOWING  THE  RELIEF  SETTING  TO  BE  REACHED. 
FAILURE  TO  RESEAT  MAY  THEN  RESULT  IN  DUMPING  HELIUM  OVERBOARD 
CAUSING  ENGINE  SHUTDOWN  SHOULD  THE  HELIUM  SUPPLY  BE  DEPLETED 
PRIOR  TO  MECO.  FAILURE  TO  REMAIN  CLOSED  RESULTS  IN  THE  SAME 
EFFECT . 


REFERENCES:  RI  MAIN  PROPULSION  SYSTEM  SCHEMATIC,  VS70-41500X, 

BOOSTER  SYSTEMS  BRIEFS,  JSC-19401,  l-OCT-84;  RI  SPEC  DWG  FOR 
MC284-0398?  SSSH  REV  C,  DWG  10.8  MPS  HELIUM  SUPPLY 


REPORT  DATE  01/16/87 


C-258 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

3121 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/2 

1/1 


ITEM:  ENGINE  HE  RELIEF  VALVE  PANEL  A;B  (RV1,8;2,9;3, 10) 

FAILURE  MODE:  INTERNAL  LEAKAGE 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  RELIEF  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/2 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING : 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0398-005  (OV099,103,104) ; -004  (OV102) 


CAUSES:  MAIN  POPPET  SEAT  FAILURE?  PILOT  POPPET  SEAT  FAILURE 

SPRING  BREAKAGE  ' 


EFFECTS/RATIONALE : 

FAILURE  IS  NOT  DETECTABLE  AT  VALVE  EXCEPT  DURING  CHECKOUT. 
OCCURANCE  DURING  POWERED  FLIGHT  IS  MANIFESTED  BY  HIGHER  THAN 
USUAL  HELIUM  CONSUMPTION  FOR  A GIVEN  ENGINE  SUPPLY.  WORST  CASE 
LEAKAGE  MAY  RESULT  IN  LOSS  OF  HELIUM  SUPPLY  TO  AN  OPERATING 
ENGINE  CAUSING  SHUTDOWN.  THIS  FAILURE  IS  FUNCTIONALLY  SAME  AS 
MDAC  3120  EXCEPT  IS  NOT  A RESULT  OF  FAILURE  OF  ANOTHER  COMPONENT. 


REFERENCES:  RI  MAIN  PROPULSION  SYSTEM  SCHEMATIC,  VS70-41500X 

BOOSTER  SYSTEMS  BRIEFS,  JSC-19401,  l-OCT-84?  RI  SPEC  DWG  FOR 
MC284-0398?  SSSH  REV  C,  DWG  10.8  MPS  HELIUM  SUPPLY 


REPORT  DATE  01/16/87 


C-259 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

3122 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


ENGINE  HE  RELIEF  VALVE  PANEL  A?B  (RV1,8?2,9;3,10) 
FAILS  TO  OPEN 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  RELIEF  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

2/2 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0398-005  (OV099, 103,104) ? -004  (OV102) 


CAUSES:  PLUGGED  SENSE  LINE;  CONTAMINATION  OF  FILTER  IN  SENSE 

PORT?  OR  SENSE  LINE  OPEN 


EFFECTS/RATIONALE:  „„„„  „„ 

MAY  EXCEED  BURST  PRESSURE  SPEC  VALUE  CAUSING  RUPTURE  OF  VALVE  OR 
DOWNSTREAM  COMPONENTS.  FAILURE  TO  OPEN  IS  A MODE  ONLY  CONSIDERED 
IF  UPSTREAM  REGULATOR  FAILS  HIGH.  MAY  BE  DETECTABLE  BY  REG  OUT 
PRESSURE  MEASUREMENT  V41P1153/54?1253/54;1353/54,  GOING 
OFFSCALE  HIGH. 


REFERENCES:  RI  MAIN  PROPULSION  SYSTEM  SCHEMATIC,  VS70-41500X, 

BOOSTER  SYSTEMS  BRIEFS,  JSC-19401,  l-OCT-84?  RI  SPEC  DWG  FOR 
MC284-0398?  SSSH  REV  C,  DWG  10.8  MPS  HELIUM  SUPPLY 


REPORT  DATE  01/16/87 


C-260 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/23/86 

SUBSYSTEM:  MPS 

MDAC  ID:  3123 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM:  ENGINE  HE  RELIEF  VALVE  PANEL  A;B  (RV1, 8; 2, 9; 3, 10) 

FAILURE  MODE:  EXTERNAL  LEAKAGE  ' 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

ENGINE  HELIUM  REG  PANEL  A,B 
RELIEF  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


REDUNDANCY  SCREENS: 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0398-005  (OV099, 103,104) ; -004  (OV102) 

CAUSES:  SEAL  LEAKAGE  AT  VALVE  INLET  OR  THRU  INTERNAL  SEALS 

EFFECTS/RATIONALE : 

WORST  CASE  LEAKAGE  MAY  RESULT  IN  DEPLETION  OF  ENGINE  HELIUM 
SUPPLY  CAUSING  SHUTDOWN.  iUM 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

1/1 

2/2 

TAL: 

1/1 

3/3 

AOA: 

1/1 

3/3 

3/3 

ATO: 

1/1 

A [NA  ] 

B [NA  ] 

C [NA  ] 

REFERENCES:  RI  MAIN  PROPULSION  SYSTEM  SCHEMATIC.  VS70-41500X 
BOOSTER  SYSTEMS  BRIEFS,  JSC-19401,  l-OCT-84?  RI  SPEC  DWG  FOR  ' 
MC284-0398;  SSSH  REV  C,  DWG  10.8  MPS  HELIUM  SUPPLY 


REPORT  DATE  01/16/87 


C-261 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/23/86 

MPS 

3130 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


ENGINE  HELIUM  SUPPLY  RELIEF  VALVE  SENSE  LINE 
EXTERNAL  LEAKAGE 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  RELIEF  VALVE 

4)  SENSE  LINE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  UNKNOWN 

CAUSES:  CRACKED  LINE, 

LOOSE  OR 

BROKEN  B-NUT 

EFFECTS/RATIONALE : 

FAILURE  COMPROMISES  THE  ABILITY  OF  THE  RELIEF  VALVE  TO  SENSE  AN 
OVERPRESSURE  CAUSED  BY  A FAILED  (OPEN)  REGULATOR.  LOSS  OF  ALL 
ABILITY  TO  SENSE  DOWNSTREAM  PRESSURE  DISABLES  THE  RELIEF  VALVE 
(SEE  MDAC  #3122).  GROSS  LEAKAGE  OF  THE  LINE  MAY  RESULT  IN  LOSS 
OF  ENGINE  HELIUM  CAUSING  ENGINE  SHUTDOWN. 


REFERENCES:  RI  MAIN  PROPULSION  SYSTEM  SCHEMATIC,  VS70-41500X 

BOOSTER  SYSTEM  BRIEFS,  JSC- 194 01,  l-OCT-84. 


REPORT  DATE  01/16/87 


C-262 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/24/86 

SUBSYSTEM:  MPS 

MDAC  ID:  3140 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  ENGINE  REG  OUTLET  CHECK  VLV  (CV5,29;6,40;7, 45) 

FAILURE  MODE:  FAILS  TO  CLOSE,  OR  REMAIN  CLOSED 


LEAD 

ANALYST:  M.L.MCNEELY 

BREAKDOWN  HIERARCHY: 

1) 

HELIUM  SUPPLY 

2) 

ENGINE  HELIUM  REG  PANEL 

3) 

REG  OUTLET  CHECK  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 

SUBSYS  LEAD:  A. J. MARINO 

A,  B 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  . ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  ME284-0472-0034 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


B [NA  ] C [NA  ] 


(099,103,104);  -0014  (OV102) 


CAUSES:  POPPET  SEAT  FAILURE?  CONTAMINATION?  SPRING  BREAKAGE 


EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT  UNLESS  ACCOMPANIED  BY  ANOTHER  PARTICULAR 
FAILURE  IN  THE  SAME  FLOW  PATH.  IF  THE  PATH  HAS  BEEN  ISOLATED  AND 
A "LEAK"  EXISTS  BETWEEN  THE  ISOLATION  VALVE  (LV1-6)  AND  THE  CHECK 
VALVE  (OPEN  RELIEF  VALVE),  LOSS  OF  HELIUM  COULD  RESULT  IN 
ENGINE  SHUTDOWN. 


REFERENCES:  RI  MAIN  PROPULSION  SYS.  SCHEMATIC,  VS70-41500X? 
BOOSTER  SYSTEMS  BRIEFS,  JSC-19401,  l-OCT-84?  RI  SPEC  DWG  FOR 
ME284-0472 


REPORT  DATE  01/16/87 


C-263 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/24/86 

MPS 

3141 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


ENGINE  REG  OUTLET  CHECK  VLV  (CV5,29;6,40;7,45) 
FAILS  TO  OPEN 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  REG  OUTLET  CHECK  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  ME284-0472-0034  (099,103,104);  -0014  (OV102) 


CAUSES:  BLOCKAGE  (GROSS  CONTAMINATION) 


EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  PREVENTS  HELIUM  FLOW  THROUGH  1 LEG  OF  REDUNDANT 
PATHS  PROVIDED  TO  EACH  ENGINE.  FAILURE  IS  FAIRLY  EASY  TO  DETECT 
BY  REG  OUT  PRESSURE  REACHING  LOCKUP  VALVE.  MEASUREMENT  IS 
UPSTREAM  OF  THE  CHECK  VALVE.  FAILURE  OF  BOTH  FLOW  PATHS 
(FOR  ENGINE  1&3)  WOULD  CAUSE  ENGINE  SHUTDOWN.  THREE  FLOW  PATHS 
ARE  AVAILABLE  FOR  ENGINE  2. 


REFERENCES:  RI  MAIN  PROPULSION  SYS.  SCHEMATIC,  VS70-41500X? 
BOOSTER  SYSTEMS  BRIEFS,  JSC-19401,  l-OCT-84?  RI  SPEC  DWG  FOR 
ME284-0472 


REPORT  DATE  01/16/87 


C-264 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/05/86 

MPS 

3150 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM: 

(LV59, 61, 63) 
FAILURE  MODE: 


ENGINE  HELIUM  SUPPLY  INTERCONNECT  INLET  VALVE 
FAILS  TO  OPEN  OR  REMAIN  OPEN 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

ENGINE  HELIUM  REG  PANEL  A,B 
ENGINE  INTERCONNECT  INLET  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/2 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING : 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0403-0017  (OV099,103,104) ; -0007  TYPE  V (102) 


CAUSES:  FAILURE  TO  VENT  CLOSING  PRESSURE  THRU  PILOT  BALL  AND 

UPPER  SEAT;  FAILURE  TO  SEAL  INLET  PRESSURE  FROM  REFERENCE  CAVITY; 
LOSS  OF  ELECTRICAL  SIGNAL. 


EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT  UNLESS  IT  BECOMES  NECESSARY  TO  SUPPLY 
PNEUMATIC  HELIUM  TO  AN  ENGINE  HELIUM  PURGE  SYSTEM.  THE  LEFT 
ENGINE  INTERCONNECT  INLET  VALVE  (LV61)  IS  ALSO  CRITICAL  TO  AFT 
COMPARTMENT  PURGES  DURING  RTLS  AND  TAL  ABORT  LANDING  PHASES. 


REFERENCES:  RI  MPS  SCHEMATIC,  VS70-415001  (102);  VS70-41500X 

RI  SPEC  DWG  MC284-0403.  BOOSTER  SYSTEMS  BRIEFS,  JSC19041,  1-OCT- 


REPORT  DATE  01/16/87 


C-265 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/27/86 

MPS 

3151 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

(LV59,61,63) 
FAILURE  MODE: 


ENGINE  HELIUM  SUPPLY  INTERCONNECT  INLET  VALVE 
FAILS  TO  CLOSE;  GROSS  INTERNAL  LEAKAGE 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  ENGINE  INTERCONNECT  INLET  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0403-0017 

(OV099,103,104)  ; 

-0007  TYPE 

CAUSES:  PLUGGED  INTERNAL  FILTER;  PUSH  ROD  PIN  BROKEN;  MAIN  PILOT 

SPRING  OR  MAIN  POPPET  SPRING  BROKEN;  DAMAGED  MAIN  POPPET  SEAT. 

EFFECTS/RATIONALE:  T4, 

FAILURE  TO  CLOSE  HAS  NO  EFFECT.  FLOW  FROM  AN  ENGINE  SYSTEM  IS 
PREVENTED  BY  A CHECK  VALVE;  UNDESIRED  FLOW  TO  AN  ENGINE  SYSTEM  IS 
PREVENTED  BY  AN  ISOLATION  VALVE. 


REFERENCES:  RI  MPS  SCHEMATIC,  VS70-415001  (102);  VS70-41500X. 

RI  SPEC  DWG  MC284-0403.  BOOSTER  SYSTEMS  BRIEFS,  JSC19041,  1-OCT 
84. 


REPORT  DATE  01/16/87 


C-266 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/05/86 

MPS 

3152 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

(LV59 ,61,63) 
FAILURE  MODE: 


ENGINE  HELIUM  SUPPLY  INTERCONNECT  INLET  VALVE 
EXTERNAL  LEAKAGE 
LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

ENGINE  HELIUM  REG  PANEL  A,  B 
ENGINE  INTERCONNECT  INLET  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0403-0017  (OV099, 103,104)  ; -0007  TYPE  V (102) 

CAUSES:  FAILURE  OF  METAL  'V'  SEALS  OR  SOLENOID  ASSEMBLY  SEALS 

EFFECTS/RATIONALE : 

LEAKAGE  results  in  loss  of  pneumatic  valve  helium  supply. 

WORST  CASE  LEAKAGE  MAY  DEPLETE  PNEUMATIC  SUPPLY.  HOWEVER 
ACCUMULATORS  PROVIDE  VALVE  CLOSING  CAPABILITY  AFTER  MECO. ' 


REFERENCES:  RI  MPS  SCHEMATIC,  VS70-415001  (102) 

RI  SPEC  DWG  MC2 84-04 03.  BOOSTER  SYSTEMS  BRIEFS, 

O A “ 


7 VS70-41500X. 
JSC19041,  1-OCT- 


REPORT  DATE  01/16/87 


C-267 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  10/27/86 

SUBSYSTEM:  MPS 

MDAC  ID:  3160 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  ENGINE  HELIUM  SUPPLY  INTERCONNECT  OUTLET  VALVE 

(LV60, 62,64) 

FAILURE  MODE:  FAILS  TO  OPEN,  OR  REMAIN  OPEN 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  ENGINE  INTERCONNECT  OUTLET  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] C [NA  ] 


LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0403-0011  (OV099, 103, 104)  ; -0001  (102) 


CAUSES:  FAILURE  TO  VENT  CLOSING  PRESSURE  THRU  PILOT  BALL  AND 

UPPER  SEAT;  FAILURE  TO  SEAL  INLET  PRESSURE  FROM  REFERENCE  CAVITY; 
LOSS  OF  ELECTRICAL  SIGNAL 


EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT  DURING  POWERED  FLIGHT  AS  FLIGHT  RULES 
PREVENT  OPENING  OUTLET  VALVES  TO  SUPPLY  ENGINE  HELIUM  TO  ANOTHER 
ENGINE  OR  TO  THE  PNEUMATIC  SUPPLY  SYSTEM  DURING  THIS  PERIOD. 
REDUNDANT  PATHS  ARE  AVAILABLE  FOR  FAILURE  TO  OPEN  DURING  MPS  DUMP 
AND  ENTRY. 


REFERENCES:  RI  MPS  SCHEMATIC,  VS70-415001  (102);  VS70-41500X. 

RI  SPEC  DWG  MC284-0403.  BOOSTER  SYSTEMS  BRIEFS,  JSC19041,  1-OCT- 
84. 


REPORT  DATE  01/16/87 


C-268 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/05/86 

MPS 

3161 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

(LV60,62,64) 
FAILURE  MODE: 


ENGINE  HELIUM  SUPPLY  INTERCONNECT  OUTLET  VALVE 
FAILS  TO  CLOSE,  INTERNAL  LEAKAGE 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

ENGINE  HELIUM  REG  PANEL  A,B 
ENGINE  INTERCONNECT  OUTLET  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/3 

3/3 

3/3 


RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION: 
PART  NUMBER: 


CAUSES:  PLUGGED  INTERNAL  FILTER;  SOLENOID  ACTUATOR  PIN  BROKEN, 

MAIN  OR  PILOT  POPPET  SEAT  FAILURE. 

EFFECTS/RATIONALE : 

^ CLOSE  HAS  NO  EFFECT.  UNDESIRED  FLOW  TO  ANOTHER  ENGINE 
SYSTEM  IS  PREVENTED  BY  THE  INTERCONNECT  INLET  VALVE.  UNDESIRED 
REVERSE  FLOW  IS  PREVENTED  BY  A CHECK  VALVE.  HELIUM  FLOW  TO  THE 
PNEUMATIC  SYSTEM  WILL  OCCUR  IF  THE  PNEUMATIC  SYSTEM  PRESSURE 
IS  BELOW  THAT  OF  THE  ENGINE  SYSTEM. 


REFERENCES:  RI  MPS  SCHEMATIC,  VS70-415001  (102);  VS70-41500X 

RI  SPEC  DWG  MC284-0403.  BOOSTER  SYSTEMS  BRIEFS,  JSC19041,  1-OCT- 


REPORT  DATE  01/16/87 


C-269 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/05/86 

MPS 

3162 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/2 

1/1 


ITEM:  ENGINE  HELIUM  SUPPLY  INTERCONNECT  OUTLET  VALVE 

(LV60,62,64) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  ENGINE  INTERCONNECT  OUTLET  VALVE 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/2 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0403-0017  (OV099,103,104) ; -007  TYPE  V (102) 


CAUSES:  FAILURE  OF  METAL  'V'  SEALS  OR  SOLENOID  ASSEMBLY  SEALS 


EFFECTS/RATIONALE : 

GROSS  LEAKAGE  RESULTS  IN  LOSS  OF  ENGINE  HELIUM  SUPPLY  TO  A GIVEN 
ENGINE.  WORST  CASE  LEAKAGE  MAY  RESULT  IN  ENGINE  SHUTDOWN  DUE  TO 
LOSS  OF  HELIUM  PURGE.  THE  PROBABILITY  OF  METALLIC  TYPE  SEAL 
FAILURE  IS  UNKNOWN. 


REFERENCES:  RI  MPS  SCHEMATIC,  VS70-415001  (102);  VS70-41500X. 

RI  SPEC  DWG  MC284-0403.  BOOSTER  SYSTEMS  BRIEFS,  JSC19041,  1-OCT- 
84. 


REPORT  DATE  01/16/87 


C-270 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM:  MPS 

MDAC  ID:  3170 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  ENGINE  HELIUM  INTERCONNECT  CHECK  VALVE-PANEL 

OUTLET  (CV28, 39,44) 

FAILURE  MODE:  FAILS  TO  CLOSE,  REMAIN  CLOSED 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  ENGINE  HE  INTERCONNECT  CHECK  VALVE-  OUTLET 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ) B [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0472-0002 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES:  POPPET  SEAT  FAILURE;  CONTAMINATION?  SPRING  BREAKAGE 


EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT.  OUTLET  INTERCONNECT  VALVE  PREVENTS 
UNDESIRABLE  REVERSE  FLOW. 


REFERENCES:  RI  MAIN  PROPULSION  SYSTEM  SCHEMATICS,  VS70-415001, 

006,  007  & 008.  BOOSTER  SYS'S.  BRIEFS,  JSC-19401,  1-OCT.1984;  RI 
SPEC  DWG  FOR  ME284-0472  PARTS. 


REPORT  DATE  01/16/87 


C-271 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/05/86 

SUBSYSTEM:  MPS 

MDAC  ID:  3171 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  ENGINE  HELIUM  INTERCONNECT  CHECK  VALVE-PANEL 

OUTLET  (CV28,39,44)  

FAILURE  MODE:  FAILS  TO  OPEN,  OR  REMAIN  OPEN 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  ENGINE  HE  INTERCONNECT  CHECK  VALVE-  OUTLET 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


HDW/FUNC 
3/3 
3/3 
3/3 
3/3 


CRITICALITIES 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0472-0002 

CAUSES:  GROSS  CONTAMINATION 

EFFECTS/RATIONALE:  

CHECK  VALVE  IS  NORMALLY  CLOSED  DURING  POWERED  FLIGHT.  fLOW 
THROUGH  VALVE  IS  ONLY  REQUIRED  DURING  MPS  DUMP  AND  ENTRY  PURGE 
DURING  WHICH  OTHER  FLOW  PATHS  ARE  AVAILABLE. 


REFERENCES:  RI  MAIN  PROPULSION  SYSTEM  SCHEMATICS, 
006,  007  & 008.  BOOSTER  SYS'S.  BRIEFS,  JSC-19401, 
SPEC  DWG  FOR  ME284-0472  PARTS. 


VS70-415001, 
1-OCT.1984 ; RI 


REPORT  DATE  01/16/87 


C-272 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/07/86 

MPS 

3180 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM: 

(CV27 ,38,43) 
FAILURE  MODE: 


ENGINE  HELIUM  INTERCONNECT  CHECK  VALVE-PANEL  INLET 
FAILS  TO  CLOSE 


LEAD  ANALYST:  M.L.MCNEELY 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A, 

3)  ENGINE  HELIUM  INTERCONNECT 

4) 

5) 

6) 

7) 

8) 

9) 


B 

CHECK  VALVE-  INLET 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0472-0002 


CAUSES:  POPPET  SEAT  FAILURE;  CONTAMINATION;  SPRING  BREAKAGE 


EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT.  INLET 
UNDESIRABLE  REVERSE  FLOW. 


INTERCONNECT  VALVE  PREVENTS 


REFERENCES:  RI  MAIN  PROPULSION 
006,  007  & 008.  BOOSTER  SYS’S. 
SPEC  DWG  FOR  ME284-0472  PARTS. 


SYSTEM  SCHEMATICS, 
BRIEFS,  JSC-19401, 


VS70-415001, 
1-OCT.1984;  RI 


REPORT  DATE  01/16/87 


C-273 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/07/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  2/2 

MDAC  ID:  3181  ABORT:  1/1 

ITEM:  ENGINE  HELIUM  INTERCONNECT  CHECK  VALVE-PANEL  INLET 

(CV27 , 38,43) 

FAILURE  MODE:  FAILS  TO  OPEN,  OR  REMAIN  OPEN 

LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  HELIUM  SUPPLY 

2)  ENGINE  HELIUM  REG  PANEL  A,B 

3)  ENGINE  HELIUM  INTERCONNECT  CHECK  VALVE-  INLET 

4) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  MC284-0472-0002 


CAUSES:  GROSS  CONTAMINATION 

EFFECTS/RATIONALE : 

CHECK  VALVE  IS  NORMALLY  CLOSED  DURING  POWERED  FLIGHT.  FLOW 
THROUGH  CHECK  VALVE  IS  REQUIRED  NOMINALLY  AT  ET  SEP  (AUTO 
SEQUENCE)  AND  DURING  PURGE  PREP/PURGE  (CV38  ONLY)  DURING  ENTRY 
(MANUAL  SEQUENCE).  OFF  NOMINAL  FLOW  IS  NECESSARY  ONLY  WHEN 
PNEUMATIC  HELIUM  IS  SUPPLED  TO  SUPPLEMENT  ENGINE  HELIUM  PURGE 
REQUIREMENTS  VIA  INLET  INTERCONNECT  VALVE. 


REFERENCES:  RI  MAIN  PROPULSION  SYSTEM  SCHEMATICS,  VS70-415001, 

006,  007  & 008.  BOOSTER  SYS*S.  BRIEFS,  JSC-19401,  1-OCT.1984;  RI 

SPEC  DWG  FOR  ME284-0472  PARTS. 


REPORT  DATE  01/16/87 


C-274 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/24/86 

MPS 

3190 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  MAIN  ENGINE  GN2  PURGE  DISCONNECT  (ORB  HALF)  (PD14) 

FAILURE  MODE:  FAILS  TO  CLOSE  OR  REMAIN  CLOSED 


LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  GN2  SUPPLY 

2)  INLET  ENGINE  GN2  PURGE  SUPPLY  FROM  GSE 

3)  ORBITER  HALF  DISCONNECT 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B (NA  ] 

C [NA  ] 

LOCATION:  LEFT  T-0  UMBILICAL  PANEL 

PART  NUMBER:  MC276-0003-0017  (OV103) ; -0007  (099,102,104) 


CAUSES:  POPPET  SEAT  FAILURE;  CONTAMINATION;  SPRING  BREAKAGE 

EFFECTS/RATIONALE : 

NO  EFFECT.  GN2  PURGE  CEASES  PRIOR  TO  L/OFF. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-275 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

3200 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM:  FACILITY  PORTS 

FAILURE  MODE:  GROSS  LEAKAGE 

LEAD  ANALYST:  M.L.MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  HELIUM  SYSTEM 

2)  ENGINE  1,2,3  HELIUM  REG  PANELS  A;B 

3)  FACILITY  PORTS 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 


CRITICALITIES 


HDW/FUNC 

3/3 

2/2 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  UNKNOWN 

CAUSES:  SEAL  FAILURE 


EFFECTS /RATIONALE i 

LEAKAGE  FROM  ANY  PANEL  FACILITY  PORT,  WHETHER  THE  HIGH  PRESSURE 
SIDE  OR  LOW  PRESSURE  SIDE  MAY  DEPLETE  AN  ENGINE  HELIUM  SUPPLY. 


REFERENCES:  RI  MPS  SCHEMATICS,  VS70-41500X 


REPORT  DATE  01/16/87 


C-276 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  9/16/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4010 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/2R 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


PNEU  VALVE  HE  SUPPLY  CHECK  VALVE  (CV4) 

FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEUMATIC  HELIUM  SUPPLY  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


HDW/FUNC 

3/2R 

3/2R 

3/2R 

3/2R 


C [ P ] 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/2R 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] 


LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
ME2 84 -04 72 -0002 


RTLS: 
TAL: 
AO  A: 
ATO: 


B [ P ] 


FAILURE  VIBRATI0N'  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

PNEUMATIC  HELIUM  WILL  NOT  BE  USABLE  FOR  LAUNCH-LAUNCH  DELAY  op 

hematic  helium  will 

t^toc J?SS  °F  ALL  FUNCTIONAL  REDUNDANCY  WILL  RESULT 
IN  LOSS  OF  HELIUM  OVERBOARD.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
CKECK  VALVE  FUNCTION.  LOSS  OF  MISSION  OT  TO  l2S  OF  VALVE 
ACTUATION  CAPABILITY. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-277 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


9/16/86 

MPS 

4011 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  PNEU  VALVE  HE  SUPPLY  CHECK  VALVE  (CV4) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

PNEUMATIC  HELIUM  SUPPLY  CHECK  VALVE 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/ NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0002 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

PNEUMATIC  HELIUM  WILL  NOT  BE  USABLE  FOR  LAUNCH-LAUNCH  DELAY  OR 
MISSION  SCRUB.  LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY  WILL  RESULT  IN 
INABILITY  TO  LOAD  PNEUMATIC  HELIUM. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-278 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

4020 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  PNEU  VALVE  HE  REG  OUTLET  CHECK  VALVE  (CV8) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

PNEUMATIC  HE  REG 

5) 

6) 

7) 

8) 

9) 

OUTLET  CHECK  VALVE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/1R 

3/3 

3/1R 

3/1R 


RTLS: 
TAL: 
AO  A: 
ATO: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0024 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  HELIUM 
OVERBOARD.  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  MPS  VALVE 
ACTUATION  CAPABILITY. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-279 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

4021 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  PNEU  VALVE  HE  ISOLATION  CHECK  VALVE  (CV8) 

FAILURE  MODE:  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

PNEUMATIC  HE  REG 

OUTLET  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC  ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING 

: 2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] B [ P 

] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0013 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  BECAUSE  PNEUMATIC  HELIUM  WILL  NOT  BE 
AVAILABLE  FOR  MPS  VALVE  ACTUATION  AND  AFT  COMPARTMENT  PURGE. 
LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  CHECK 
VALVE  FUNCTION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-280 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

4030 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


PNEU  VALVE  HE  ISOLATION  CHECK  VALVE  (CV9) 
FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEUMATIC  HE  ISOLATION 

5) 

6) 

7) 

8) 

9) 


CHECK  VALVE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

2/1R 

3/3 

2/1R 

2/1R 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0013 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  BECAUSE  PNEUMATIC  HELIUM  WILL  NOT  BE 

^«£?LABLE  F0R  MPS  DUMP  VALVE  ACTUATION  AND  AFT  COMPARTMENT  PURGE. 
LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  CHECK 
VALVE  FUNCTION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-281 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

4031 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/2R 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


PNEU  VALVE  HE  ISOLATION  CHECK  VALVE  (CV9) 

FAILS  TO  CLOSE,  FAILS  TO  REMAIN  OPEN,  INTERNAL 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEUMATIC  HE  ISOLATION  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


HDW/FUNC 

3/2R 

3/2R 

3/2R 

3/2R 


C [ P ] 


A AM*' 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 


HDW/FUNC 

3/3 

3/2R 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0013 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


LOSS^F^ ALL1  FUNCTIONAL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  CHECK 
VALVE  FUNCTION.  LOSS  OF  MISSION  DUE  TO  LOSS  OF  MPS  VALVE 
ACTUATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-282 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

4040 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


G02  PRESS  MANIF  REPRESS  CHECK  VALVE  (CV10) 

FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A.J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  G02  PRESS  MANIF.  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

/NA 

3/3 

/NA 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0011 


FAILURE  VISRATI0N'  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CHECK  BACKFLOW  DURING  MPS 
DUMP.  SYSTEM  DEGRADATION. 


G02  MANIFOLD 


REFERENCES : 


REPORT  DATE  01/16/87 


C-283 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


10/10/86 

MPS 

4041 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  G02  PRESS  MANIF  REPRESS  CHECK  VALVE  (CV10) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  GO 2 PRESS  MANIF.  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

/NA 

3/3 

/NA 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0011 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE:  

HELIUM  WILL  NOT  BE  FED  INTO  THE  G02  PRESSURE  MANIFOLD  FOR  DUMP 
AND  REPRESS.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-284 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

4050 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  FEED  MANIF  REPRESS  CHECK  VALVE  (CV12) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  FEED  MANIF  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

/NA 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

/NA 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0013 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

IOSS  OF  CAPABILITY  TO  CHECK  BACKFLOW  DURING  MPS  L02  MANIFOLD 
DUMP.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-285 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

4051 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  L02  FEED  MANIF  REPRESS  CHECK  VALVE  (CV12) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LQ2  FEED  MANIF  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

/NA 

1/1 

/NA 

1/1 

1/1 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0013 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  MPS  L02  MANIFOLD  DUMP 
CAPABILITY.  LOSS  OF  FLIGHT  CONTROL  DUE  TO  EXCESSIVE  AFT  CG. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-286 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

4060 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  GH2  PRESS  MANIF  REPRESS  CHECK  VALVE  (CV13) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  GH2  PRESS  MANIF  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  /NA 

LIFTOFF:  3/3 

ONORBIT:  /NA 

DEORBIT:  3/3 

LANDING/SAFING:  3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0011 

CAUSES:  VIBRATION,  CONTAMINATION, 

FAILURE 

OR  PIECE-PART 

STRUCTURAL 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CHECK  BACKFLOW  DURING  MPS  GH2  MANIFOLD 
DUMP.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-287 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

4061 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  GH2  PRESS  MANIF  REPRESS  CHECK  VALVE  (CV13) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  GH2  PRESS  MANIF  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

/NA 

3/3 

/NA 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0011 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  AND  REPRESS  GH2  MANIFOLD.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-288 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/12/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4070 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRC  MANIF  REPRESS  CHECK  VALVE  (CV14) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  RECIRC  MANIF  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  /NA  RTLS : 

LIFTOFF:  3/3  TAL: 

ONORBIT:  /NA  AO A: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0011 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CHECK  BACKFLOW  DURING  MPS  LH2  RECIRC 
MANIFOLD  DUMP.  SYSTEM  DEGRADATION. 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REFERENCES : 


REPORT  DATE  01/16/87 


C-289 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

ITEM: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


11/12/86 

MPS 

4071 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


FAILURE  MODE:  FAILS  TO  OPEN 

LEAD  ANALYST:  A.J. MARINO 


LH2  RECIRC  MANIF  REPRESS  CHECK  VALVE  (CV14) 

SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

LH2  RECIRC  MANIF 

5) 

6) 

7) 

8) 

9) 

REPRESS  CHECK  VALVE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

/NA 

3/3 

/NA 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0011 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  AND  REPRESS  THE  MPS  LH2  RECIRC 
MANIFOLD.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-290 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

MPS 

4080 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


LH2  FEED  MANIF  NOM  REPRESS  CHECK  VALVE  (CV15) 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  MANIF  NOM  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

/NA 

3/3 

/NA 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0024 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CHECK  BACKFLOW  DURING  MPS 
DUMP.  SYSTEM  DEGRADATION. 


LH2  FEED  MANIFOLD 


REFERENCES : 


REPORT  DATE  01/16/87 


C-291 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/12/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4081 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  FEED  MANIF  NOM  REPRESS  CHECK  VALVE  (CV15) 
FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 
7) 
3) 
9) 


MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 
LH2  FEED  MANIF  NOM 


REPRESS  CHECK  VALVE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ S AFING : 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0024 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


TO  DUMP  AND  REPRESS  THE  MPS  LH2  FEED  MANIFOLD. 

SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-292 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

4090 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


L02  TANK  PRE-PRESS  CHECK  VALVE  (CV16) 

FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  TANK  PRE-PRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

/NA 

AOA: 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


VIBRATI0N'  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  ULLAGE  PRESSURE  RESULTS  IN  ALL  THRE 
SHUTDOWN  AND  LOSS  OF  LIFE/VEHICLE. 


MAIN  ENGINES 


REFERENCES : 


REPORT  DATE  01/16/87 


C-293 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/13/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4091  ABORT:  3/3 

ITEM:  L02  TANK  PRE-PRESS  CHECK  VALVE  (CV16) 

FAILURE  MODE:  FAILS  TO  OPEN 

LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  TANK  PRE-PRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  HELIUM  PREPRESS  PRELAUNCH.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-294 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

4100 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  LH2  TANK  PRE-PRESS  CHECK  VALVE  (CV17) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  TANK  PRE-PRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

/NA 

AOA: 

DEORBIT: 

/NA 

ATO: 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  ULLAGE  PRESSURE  RESULTS  IN  ALL  THREE  MAIN  ENGINE  SHUTDOWN 
AND  LOSS  OF  LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-295 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

4101 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  TANK  PRE-PRESS  CHECK  VALVE  (DV17) 
FAILS  TO  OPEN 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  TANK  PRE-PRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING : 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0005 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS /RATIONALE : 

LOSS  OF  CAPABILITY  TO  HELIUM  PREPRESS  PRELAUNCH.  SYSTEM 

DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-296 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

4110 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


HDW/FUNC 
3/3 
3/3 

GH2  PRESS  MANIFOLD  REPRESS  CHECK  VALVE  (CV24) 

FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  GH2  PRESS  MANIFOLD  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


LOCATION: 
PART  NUMBER: 


HDW/FUNC 

/NA 

3/3 

/NA 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

AFT  FUSELAGE 
ME2 8 4 -04 7 2 -0011 


FAILURE  VIBRATI0N'  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 
EFFECTS/RATIONALE : 

^?^^PABILITY  T0  CHECK  BACKFLOW  DURING  MPS  GH2  PRESS 
MANIFOLD  DUMP  AND  REPRESS.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-297 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

MPS 

4111 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  GH2  PRESS  MANIFOLD  REPRESS  CHECK  VALVE  (CV24) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  GH2  PRESS  MANIFOLD  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/NA 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0011 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS /RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  AND  REPRESS  GH2  PRESS  MANIFOLD. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-298 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/14/86 

MPS 

4120 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  LH2  FEED  MANIF  RTLS  REPRESS  CHECK  VALVE  (CV30) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  MANIF  RTLS  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

/NA 

3/3 

/NA 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0024 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CHECK  BACKFLOW  DURING  MPS  LH2  FEED  MANIFOLD 
DUMP  & REPRESS.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-299 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/14/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4121  ABORT:  3/3 

ITEM:  LH2  FEED  MANIF  RTLS  REPRESS  CHECK  VALVE  (CV30) 

FAILURE  MODE:  FAILS  TO  OPEN 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  MANIF  RTLS  REPRESS  CHECK  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/NA 

AO  A: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0472-0024 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  AND  REPRESS  LH2  RTLS  MANIFOLD.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-300 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/25/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4130  ABORT:  3/3 

ITEM:  PNEU  VALVE  HE  SUPPLY-ISOLATION  VALVE  (LV7,LV8) 

FAILURE  MODE:  FAILS  TO  OPEN 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  VALVE  HE  SUPPLY-ISOLATION  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0403-0011 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  USE  PNEUMATIC  HELIUM  FOR  MPS  VALVE 
ACTUATION.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-301 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4131 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


PNEU  VALVE  HE  SUPPLY-ISOLATION  VALVE  (LV7,LV8) 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J .MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  VALVE  HE  SUPPLY-ISOLATION  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0403-0011 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  USE  PNEUMATIC  HELIUM  FOR  MPS  VALVE 
ACTUATION.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-302 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/25/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4132 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  PNEU  VALVE  HE  SUPPLY-ISOLATION  VALVE  (LV7,LV8) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  VALVE  HE  SUPPLY-ISOLATION  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/3  AO  A: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0403-0011 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  USE  PNEUMATIC  HELIUM  FOR  MPS  DUMP  AND 
PURGE.  SYSTEM  DEGRADATION. 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REFERENCES : 


REPORT  DATE  01/16/87 


C-303 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4140 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  2/1R 


ITEM:  PNEU  HE  CROSSOVER  SOLENOID  (LV10) 

FAILURE  MODE:  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  HE  CROSSOVER  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

2/1R 

2/1R 

3/3 

3/3 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0403-0003 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS /RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  MPS  HELIUM  AFT  COMPARTMENT 
PURGE  RESULTING  IN  LH2  AND  L02  MIXING  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-304 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4141 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


PNEU  HE  CROSSOVER  SOLENOID  (LV10) 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 
PNEU  HE  CROSSOVER  SOLENOID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 

HDW/FUNC 

2/1R 

2/1R 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
ME2 8 4-04 03 -00 03 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  MPS  AFT  COMPARTMENT  PURGE 
RESULTING  IN  L02  AND  LH2  MIXING  WITH  EXPLOSION. 


REFERENCES  : 


REPORT  DATE  01/16/87 


C-305 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/25/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4142  ABORT:  3/3 

ITEM:  PNEU  HE  CROSSOVER  SOLENOID  (LV10) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A. J .MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  HE  CROSSOVER  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0403-0003 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  ISOLATE  THE  HELIUM  CROSSOVER.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-306 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4150 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  PREVALVE  OPENING  SOLENOID  (LV12,LV14,LV16) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PRE VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  SOLENOID  VALVE.  SYSTEM 
DEGRADATION.  L02  PREVALVE  REMAINS  OPEN  WITHOUT  HELIUM  PRESSURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-307 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4151 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  PREVALVE  OPENING  SOLENOID  (LV12,LV14,LV16) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 

CAUSES:  VIBRATION/  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  SOLENOID  VALVE  OPEN.  SYSTEM 
DEGRADATION.  L02  PREVALVE  REMAINS  OPEN  WITHOUT  HELIUM  PRESSURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-308 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4152 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


L02  PREVALVE  OPENING  SOLENOID  (LV12,LV14,LV16) 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  OF  L02  PREVALVE 
MECO  RESULTING  IN  SSME  PUMP  OVERSPEED  AND  EXPLOSION. 


TO  CLOSE  AT 


REFERENCES : 


REPORT  DATE  01/16/87 


C-309 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4160 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FXJNC 

2/1R 

2/1R 


ITEM:  L02  PREVALVE  OPENING  SOLENOID  (LV13,LV15,LV17) 

FAILURE  MODE:  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/ VEHICLE  DUE  TO  FAILURE  OF  L02  PRE VALVE  TO  CLOSE  AT 
MECO  RESULTING  IN  SSME  PUMP  OVERSPEED  AND  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-310 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4161 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  PREVALVE  CLOSING  SOLENOID  (LV13,LV15,LV17) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  OF  L02  PREVALVE  TO  CLOSE  AT 
MECO  RESULTING  IN  SSME  PUMP  OVERSPEED  AND  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-311 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/25/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4162 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  PREVALVE  CLOSING  SOLENOID  (LV13,LV15,LV17) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS /RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  SOLENOID  CLOSED.  SYSTEM 
DEGRADATION.  L02  PREVALVE  REMAINS  CLOSED. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-312 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/15/86 

MPS 

4164 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  PREVALVE  OPENING  SOLENOID  (LV18,LV20,LV22) 
FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM 

3)  PNEUMATIC  HELIUM 

4)  LH2  PREVALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  3/3 

ONORBIT:  3/3 

DEORBIT:  3/3 

LANDING/ SAFING:  3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0001 

CAUSES:  VIBRATION,  CONTAMINATION, 

FAILURE 

OR  PIECE-PART 

STRUCTURAL 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  SOLENOID  VALVE.  SYSTEM 
DEGRADATION.  LH2  PREVALVE  REMAINS  OPEN  WITHOUT  HELIUM  PRESSURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-313 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM:  MPS 

MDAC  ID:  4165 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  PREVALVE  OPENING  SOLENOID  (LV18,LV20,  LV22) 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM 

3)  PNEUMATIC  HELIUM 

4)  LH2  PREVALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0001 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS /RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  SOLENOID  VALVE  OPEN.  SYSTEM 
DEGRADATION.  LH2  PREVALVE  REMAINS  OPEN  WITHOUT  HELIUM  PRESSURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-314 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/25/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4166 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


LH2  PRE VALVE  OPENING  SOLENOID  (LV18,LV20,LV22) 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM 

3)  PNEUMATIC  HELIUM 

4)  LH2  PREVALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0001 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

£2.11  2F  LIFE/VEHICLE  DUE  TO  FAILURE  OF  LH2  PREVALVE  TO  CLOSE  AT 
EXP^SION  LTING  IN  MIXING  °F  LH2  WITH  L02  IN  THE  SSME  WITH  AN 


REFERENCES : 


REPORT  DATE  01/16/87 


C-315 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4167 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


LH2  PREVALVE  CLOSING  SOLENOID  (LV19,LV21,LV23) 
FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM 

3)  PNEUMATIC  HELIUM 

4)  LH2  PREVALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0001 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  OF  LH2  PREVALVE  TO  CLOSE 
RESULTING  IN  LH2  MIXING  WITH  L02  WITH  AN  SSME  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-316 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4168 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  LH2  PRE VALVE  CLOSING  SOLENOID  (LV19,LV21,LV23) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM 

3)  PNEUMATIC  HELIUM 

4)  LH2  PREVALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0001 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  OF  LH2  PREVALVE  TO  CLOSE  AT 
MECO  RESULTING  IN  LH2  MIXING  WITH  L02  WITH  AN  SSME  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-317 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4169 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  PREVALVE  CLOSING  SOLENOID  (LV19,LV21,LV23) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM 

3)  PNEUMATIC  HELIUM 

4)  LH2  PREVALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0001 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS /RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  THE  SOLENOID.  SYSTEM  DEGRADATION. 
LH2  PREVALVE  REMAINS  CLOSED. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-318 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

12/01/86  HIGHEST  CRITICALITY  HDW/FUNC 

Mps  FLIGHT:  2/1R 

4170  ABORT:  2/1R 

L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 

FAILURE  MODE:  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

ITEM: 

( LV2  4 ) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  2/1R 

ONORBIT:  2/1R 

DEORBIT:  2/1R 

LANDING/SAFING:  2/1R 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 

REDUNDANCY  SCREENS:  A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION, 

FAILURE 

OR  PIECE-PART 

STRUCTURAL 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  L02  FEEDLINE  MANIFOLD 
PRESSURE  RELIEF  WITH  L02  MANIFOLD  RUPTURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-319 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/01/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  2/1R 

MDAC  ID:  4171  ABORT:  2/1R 

ITEM:  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 

(LV24) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 

LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

2/1R 

AO  A: 

2/1R 

DEORBIT: 

LANDING/SAFING: 

2/1R 

2/1R 

ATO: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  L02  FEEDLINE  MANIFOLD 
PRESSURE  RELIEF  WITH  L02  MANIFOLD  RUPTURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-320 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/01/86 

MPS 

4172 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 

( LV2  4 ) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  EXTERNAL  LEAKAGE  OF  L02  OVERBOARD 
DURING  LAUNCH,  DUE  TO  LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-321 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/01/86 

MPS 

4180 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

(LV25) 

FAILURE  MODE: 


LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 
FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

2/1R 

2/1R 

2/1R 

2/1R 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  LH2  FEEDLINE  MANIFOLD 
PRESSURE  RELIEF  WITH  LH2  MANIFOLD  RUPTURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-322 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

12/01/86  HIGHEST  CRITICALITY  HDW/FUNC 

FLIGHT:  2/1R 

4181  ABORT:  2/1R 

LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 
FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 

5) 

«) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

ITEM: 

(LV25) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

3/3 

2/1R 

2/1R 

2/1R 

2/1R 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE 
PRESSURE  RELIEF  WITH  LH2 


TO  LOSS  OF  LH2  FEEDLINE 
MANIFOLD  PRESSURE. 


MANIFOLD 


REFERENCES : 


REPORT  DATE  01/16/87 


C-323 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/01/86 

MPS 

4182 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 

( LV2  5 ) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0021 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  EXTERNAL  LEAKAGE  OF  LH2  OVERBOARD 
DURING  LAUNCH,  DUE  TO  LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-324 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/01/86 

MPS 

4190 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  HE  SUPPLY  BLOWDOWN  VALVE  (LV26,LV27) 

FAILURE  MODE:  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  HE  SUPPLY  BLOWDOWN  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

2/1R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0002 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  AFT  COMPARTMENT  PURGE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-325 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/01/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4191  ABORT:  2/1R 

ITEM:  HE  SUPPLY  BLOWDOWN  VALVE  (LV26,LV27) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 

LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  HE  SUPPLY  BLOWDOWN  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0002 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  AFT  COMPARTMENT  PURGE 
RESULTING  IN  L02  AND  LH2  MIXING  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-326 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/01/86 

MPS 

4192 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  HE  SUPPLY  BLOWDOWN  VALVE  (LV26,LV27) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  HE  SUPPLY  BLOWDOWN  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

2/1R 

AO  A: 

2/1R 

DEORBIT: 

LANDING/SAFING: 

2/1R 

2/1R 

ATO: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  ME284-0404-0002 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  HELIUM  FOR  MPS  L02  DUMP. 
LOSS  OF  MPS  L02  DUMP  RESULTS  IN  LOSS  OF  FLIGHT  CONTROL. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-327 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/02/86 

MPS 

4200 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  OUTBOARD  FILL  VALVE  OPENING  SOLENOID  (LV28) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO  ' SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  OUTBOARD  FILL  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  L02  OUTBOARD  FILL  VALVE  SOLENOID. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-328 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/02/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4201  ABORT:  3/3 

ITEM:  L02  OUTBOARD  FILL  VALVE  OPENING  SOLENOID  (LV28) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  OUTBOARD  FILL  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  L02  FILL  VALVE  SOLENOID  OPEN. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-329 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/02/86 

MPS 

4202 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM*  L02  OUTBOARD  FILL  VALVE  OPENING  SOLENOID  (LV28) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

L02  OUTBOARD  FILL 

VALVE  OPENING 

SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/ SAFING: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] B 

C F ] 

c [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE:  T„ 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  L02  OVERBOARD  RESULTING  IN 

EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-330 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/02/86 

MPS 

4210 


HIGHEST  CRITICALITY  HDW/FUNC 


FLIGHT: 

ABORT: 


3/3 

3/3 


ITEM: 

FAILURE  MODE: 


L02  OUTBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV29) 
FAILS  TO  OPEN  ' 


LEAD  ANALYST:  A.J. MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

L02  OUTBOARD  FILL  VALVE  OPENING  SOLENOID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AO  A: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
MC284-0404-0012 


FAILURE  VIBRATI0N'  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  L02  FILL 
SYSTEM  DEGRADATION.  FILL  VALVE  REMAINS 
PRESSURE. 


VALVE  CLOSING  SOLENOID. 
CLOSED  WITH  NO  HELIUM 


REFERENCES : 


REPORT  DATE  01/16/87 


C-331 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/02/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4211  ABORT:  3/3 

ITEM:  L02  OUTBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV29) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 

LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  OUTBOARD  FILL  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  L02  FILL  VALVE  CLOSING  SOLENOID 
OPEN.  SYSTEM  DEGRADATION.  FILL  VALVE  REMAINS  CLOSED  WITH  NO 
HELIUM  PRESSURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-332 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/02/86 

MPS 

4212 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  OUTBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV29) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

L02  OUTBOARD  FILL 

5) 

6) 

7) 

8) 

9) 

VALVE  OPENING  SOLENOID 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  L02  FILL  VALVE  CLOSING  SOLENOID 
CLOSED.  SYSTEM  DEGRADATION.  FILL  VALVE  WILL  REMAIN  CLOSED. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-333 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4220 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  INBOARD  FILL  VALVE  OPENING  SOLENOID  (LV30) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  INBOARD  FILL  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  L02  FILL  VALVE  OPENING  SOLENOID. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-334 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4221 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


L02  INBOARD  FILL  VALVE  OPENING  SOLENOID  (LV30) 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

L02  INBOARD  FILL  VALVE  OPENING  SOLENOID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 
HDW/FUNC  ABORT 


HDW/FUNC 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
MC2 84-040 4 “00 12 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  L02  FILL  VALVE  OPENING  SOLENOID 
OPEN.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-335 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4222 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


L02  INBOARD  FILL  VALVE  OPENING  SOLENOID  (LV30) 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

L02  INBOARD  FILL  VALVE  OPENING  SOLENOID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  L02  FILL  VALVE  OPENING  AND  L02 
EXTERNAL  LEAKAGE  WITH  LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-336 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/03/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4223  ABORT:  3/3 

ITEM:  L02  INBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV31) 

FAILURE  MODE:  FAILS  TO  OPEN 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J .MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  INBOARD  FILL  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  L02  FILL  VALVE  CLOSING  SOLENOID. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-337 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4224 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


L02  INBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV31) 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

L02  INBOARD  FILL 

VALVE  CLOSING 

SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  L02  FILL  VALVE  OPENING  AND  L02 
EXTERNAL  LEAKAGE  WITH  LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-338 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4225 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  INBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV31) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

L02  INBOARD  FILL 

VALVE  CLOSING 

SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS: 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  THE  L02  FILL  VALVE  CLOSING  SOLENOID. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-339 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/02/86 

MPS 

4226 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  OUTBOARD  FILL  VALVE  OPENING  SOLENOID  (LV32) 
FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  OUTBOARD  FILL  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING : 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  LH2  OUTBOARD  FILL  VALVE  SOLENOID. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-340 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/02/86 

MPS 

4227 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM!  LH2  OUTBOARD  FILL  VALVE  OPENING  SOLENOID  (LV32) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  OUTBOARD  FILL  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  LH2  FILL  VALVE  SOLENOID  OPEN. 
SYSTEM  DEGRADATION.  owumviu  vviM. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-341 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HIGHEST  CRITICALITY  HDW/FXJNC 
FLIGHT:  2/1R 

ABORT:  2/1R 

ITEM:  LH2  OUTBOARD  FILL  VALVE  OPENING  SOLENOID  (LV32) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  OUTBOARD  FILL  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  2/1R  TAL: 

ONORBIT:  3/3  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A[2]  B[F]  C[P] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  LH2  OVERBOARD  RESULTING  IN 
EXPLOSION. 


REFERENCES : 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


DATE: 

SUBSYSTEM:  MPS 

MDAC  ID:  4228 


REPORT  DATE  01/16/87 


C-342 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/02/86 

MPS 

4229 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  OUTBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV33) 
FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

LH2  OUTBOARD  FILL  VALVE  CLOSING  SOLENOID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH: 

LIFTOFF: 

ONORBIT: 

DEORBIT: 

LANDING/ SAFING: 

REDUNDANCY  SCREENS: 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  THE  LH2  FILL  VALVE  SOLENOID.  SYSTEM 
DEGRADATION.  FILL  VALVE  REMAINS  CLOSED  WITH  NO  HELIUM  PRESSURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-343 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/02/86 

MPS 

4230 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  OUTBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV33) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

LH2  OUTBOARD  FILL 

VALVE  CLOSING 

SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B 

[NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE:  . 

LOSS  OF  CAPABILITY  TO  KEEP  THE  LH2  FILL  VALVE  CLOSING  SOLENOID 
OPEN.  SYSTEM  DEGRADATION.  FILL  VALVE  REMAINS  CLOSED  WITH  NO 
HELIUM  PRESSURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-344 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/02/86 

MPS 

4231 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


LH2  OUTBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV33) 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


LH2  OUTBOARD  FILL  VALVE  CLOSING  SOLENOID 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 

LOCATION: 

PART  NUMBER: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

B [NA  ] 


3/3 

A [NA  ] 

AFT  FUSELAGE 
MC2 84-04 04 -0012 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  LH2  FILL  VALVE 
CLOSED.  SYSTEM  DEGRADATION.  FILL  VALVE  WILL 


CLOSING  SOLENOID 
REMAIN  CLOSED. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-345 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4232 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  INBOARD  FILL  VALVE  OPENING  SOLENOID  (LV34) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  INBOARD  FILL  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  LH2  FILL  VALVE  OPENING  SOLENOID. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-346 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4233 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  INBOARD  FILL  VALVE  OPENING  SOLENOID  (LV34) 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

LH2  INBOARD  FILL  VALVE  OPENING  SOLENOID 


2) 

3) 

4) 

5) 

6) 
7) 
3) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
MC2 8 4 -04 04 -00 12 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAX  LURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  OPEN  THE  LH2  FILL  VALVE  OPENING 
SOLENOID.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-347 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4234 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  LH2  INBOARD  FILL  VALVE  OPENING  SOLENOID  (LV34) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  INBOARD  FILL  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 


CRITICALITIES 


HDW/FUNC 

3/3 

2/1R 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS /RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LH2  FILL  VALVE  OPENING  AND  LH2 
EXTERNAL  LEAKAGE  WITH  LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY. 


REFERENCES : 


*v 


REPORT  DATE  01/16/87 


C-348 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4235 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  INBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV35) 
FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  INBOARD  FILL  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

SBOTdSS™.10  0PEN  ™E  “2  FILL  VALVE  CL0SING  SOLENOID. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-349 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/03/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  2/1R 

MDAC  ID:  4236  ABORT:  2/1R 

ITEM:  LH2  INBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV35) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN,  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 


2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

LH2  INBOARD  FILL 

VALVE  CLOSING 

SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS /RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LH2  FILL  VALVE  OPENING  AND  LH2 
EXTERNAL  LEAKAGE  WITH  LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-350 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4237 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  LH2  INBOARD  FILL  VALVE  CLOSING  SOLENOID  (LV35) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

LH2  INBOARD  FILL 

5) 

6) 

7) 

8) 

9) 

VALVE  CLOSING  SOLENOID 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AO  A: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  THE  LH2  FILL  VALVE  CLOSING  SOLENOID. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-351 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4240 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  LH2  RECIRC  PUMP  VALVE  OPENING  SOLENOID  (LV36) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  RECIRC  PUMP  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 
3/3 
3/3 
/NA 
/ NA 
/NA 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  LH2  RECIRC  VALVES.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-352 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4241 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  RECIRC  PUMP  VALVE  OPENING  SOLENOID  (LV36) 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  RECIRC  PUMP  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/NA 

AOA: 

3/3 

DEORBIT: 

/NA 

ATO: 

3/3 

LANDING/ SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  OPEN  THE  LH2  RECIRC  VALVES.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-353 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/03/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4242 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRC  PUMP  VALVE  OPENING  SOLENOID  (LV36) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

LH2  RECIRC  PUMP  VALVE  OPENING 

SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

/NA 

AOA: 

DEORBIT: 

/NA 

ATO: 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  THE  LH2  RECIRC  VALVES.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-354 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4250 


HIGHEST  CRITICALITY  HDW/FUNC 


FLIGHT: 

ABORT: 


3/3 

3/3 


ITEM:  LH2  REPLENISH  VALVE  OPENING  SOLENOID(LV39) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

LH2  REPLENISH  VALVE  OPENING  SOLENOID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

/NA 

/NA 

/NA 

/NA 


RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] 


HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


C [NA  ] 


LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
MC2 8 4 -04 04 -00 12 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  LH2  REPLENISH  VALVE. 
DEGRADATION . 


SYSTEM 


REFERENCES : 


REPORT  DATE  01/16/87 


C-355 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4251 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  REPLENISH  VALVE  OPENING  SOLENOID (LV3 9) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  REPLENISH  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS /RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  OPEN  THE  LH2  REPLENISH  VALVE.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-356 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4252 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  LH2  REPLENISH  VALVE  OPENING  SOLENOID (LV3 9) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

LH2  REPLENISH  VALVE 

5) 

6) 

7) 

8) 

9) 

OPENING  SOLENOID 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


B [ F ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  TO  CLOSE  THE  LH2  REPLENISH 
VALVE  RESULTING  IN  LH2  LEAK  OVERBOARD  WITH  EXPLOSION  AND  LOSS  OF 
ALL  FUNCTIONAL  REDUNDANCY. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-357 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/03/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4260 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  MANIFOLD  REPRESS  VALVE  (LV40,LV41) 

FAILURE  MODE:  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

MPS 

2) 

HELIUM  SUPPLY 

3) 

PNEUMATIC  HELIUM 

4) 

L02  MANIFOLD  REPRESS  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

2/1R 

AO  A: 

DEORBIT: 

2/1R 

ATO: 

LANDING/SAFING: 

2/1R 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0003 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE: 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  L02  MPS  DUMP  RESULTING  IN 
LOSS  OF  FLIGHT  CONTROL. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-358 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4261 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


L02  MANIFOLD  REPRESS  VALVE  (LV40,LV41) 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  MANIFOLD  REPRESS  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

2/1R 

2/1R 

2/1R 

2/1R 


RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0003 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

JJJff  ZZ  ^IEE/VEHICLE  DUE  TO  LOSS  OF  MPS  L02  DUMP  RESULTING  IN 
LOSS  OF  FLIGHT  CONTROL. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-359 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/03/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/2R 

MDAC  ID:  4262  ABORT:  3/2R 

ITEM:  L02  MANIFOLD  REPRESS  VALVE  (LV40,LV41) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J .MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 


4) 

L02  MANIFOLD  REPRESS  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/2R 

LIFTOFF: 

3/2R 

TAL: 

3/2R 

ONORBIT: 

3/3 

AOA: 

3/2R 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0003 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  L02  REPRESS  VALVE  CLOSED  RESULTING 
IN  SSME  SHUTDOWN  AND  LOSS  OF  MISSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-360 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/03/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4270 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  MANIFOLD  REPRESS  VALVE  (LV42,LV43) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  MANIFOLD  REPRESS  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  3/3 

ONORBIT:  3/3 

DEORBIT:  3/3 

LANDING/ SAFING:  3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0003 

CAUSES:  VIBRATION,  CONTAMINATION, 

FAILURE 

OR  PIECE-PART 

STRUCTURAL 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  LH2  REPRESS  VALVE.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-361 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4271 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  MANIFOLD  REPRESS  VALVE  (LV42,LV43) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  MANIFOLD  REPRESS  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE  LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0003 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS /RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  LH2  REPRESS  VALVE  OPEN.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-362 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4272 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  LH2  MANIFOLD  REPRESS  VALVE  (LV42,LV43) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  MANIFOLD  REPRESS  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0003 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  LH2  REPRESS  VALVE  CLOSED  RESULTING 
IN  HELIUM  INGESTION  INTO  ALL  THREE  MAIN  ENGINES  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-363 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4280 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  FEED  DISCONNECT  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  L02  FEED  DISCONNECT  VALVE 
PRELAUNCH.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-364 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4281 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM: 

FAILURE  MODE: 


L02  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46) 
FAILS  TO  REMAIN  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  FEED  DISCONNECT  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  OF  L02  FEED 
OPENING  SOLENOID  TO  REMAIN  OPEN  AND  LOSS  OF  ALL 
REDUNDANCY. 


DISCONNECT 

FUNCTIONAL 


REFERENCES : 


REPORT  DATE  01/16/87 


C-365 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4282 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46) 
FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 
LEAKAGE 


LEAD  ANALYST:  A.J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  FEED  DISCONNECT  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  THE  L02  FEED  DISCONNECT  VALVE. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-366 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/09/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4290 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  3/3 

ONORBIT:  3/3 

DEORBIT:  3/3 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION, 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  L02 
SOLENOID.  SYSTEM  DEGRADATION. 


ABORT  HDW/FUNC 


RTLS: 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

] 

C [NA 

OR  PIECE-PART  STRUCTURAL 
FEED  DISCONNECT  VALVE  CLOSING 


REFERENCES : 


REPORT  DATE  01/16/87 


C-367 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4291 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


L02  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47) 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  L02  FEED  DISCONNECT  VALVE  CLOSING 
SOLENOID  OPEN.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-368 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4292 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47) 
FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 
LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  FEED  DISCONNECT  VALVE 

5) 

6) 

7) 

8) 

9) 


CLOSING  SOLENOID 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  L02  FEED  DISCONNECT  VALVE  CLOSING 
SOLENOID  CLOSED.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-369 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4300 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV48) 
FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  DISCONNECT  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE: 

LOSS  OF  CAPABILITY  TO  OPEN  THE  LH2  FEED  DISCONNECT  VALVE.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-370 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4301 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


LH2  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV48) 
FAILS  TO  REMAIN  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  DISCONNECT  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


FAILURE  VIBRATI0N'  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO 
OPENING  SOLENOID  TO  REMAIN 
REDUNDANCY. 


FAILURE  OF  LH2  FEED  DISCONNECT 
OPEN  AND  LOSS  OF  ALL  FUNCTIONAL 


REFERENCES : 


REPORT  DATE  01/16/87 


C-371 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4302 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


LH2  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV4 8) 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  XjH2  FEED  DISCONNECT  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


SsI^Sp^^Y  TO  CLOSE  THE  LH2  FEED  DISCONNECT  VALVE. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-372 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4310 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 

Sre  mode:  f“iJEtoD  opeSnONNECT  VALVE  °“sing  solenoid  <lv”) 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

LH2  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


REDUNDANCY  SCREENS: 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 

FAILURE  VIBRATI0N'  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 
EFFECTS/RATIONALE : 

“^nSid^STE^ 0,2  FEED  DISC0KKECT  VALVE  C“«NG 


REFERENCES : 


REPORT  DATE  01/16/87 


C-373 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4311 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV49) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  DISCONNECT 

5) 

6) 

7) 

8) 

9) 


VALVE  CLOSING  SOLENOID 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  LH2  FEED  DISCONNECT  VALVE  CLOSING 
SOLENOID  OPEN.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-374 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4312 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


LH2  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV49) 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

^™™C^PABILITY  T0  KEEP  THE  m2  FEED  DISCONNECT  VALVE  CLOSING 
SOLENOID  CLOSED.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-375 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/09/86 

MPS 

4320 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRC  DISCONNECT  VALVE  OPENING  SOLENOID 

(LV50) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  RECIRC  DISCONNECT  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  LH2  RECIRC  DISCONNECT  VALVE. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-376 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/03/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4321 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRC  DISCONNECT  VALVE  OPENING  SOLENOID 

(LV50) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  RECIRC  DISCONNECT  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS: 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING : 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  LH2  RECIRC  DISCONNECT  VALVE 
OPENING  SOLENOID  OPEN.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-377 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4322 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM: 

(LV50) 

FAILURE  MODE: 
LEAKAGE 


LH2  RECIRC  DISCONNECT  VALVE  OPENING  SOLENOID 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J .MARINO 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

LH2  RECIRC  DISCONNECT  VALVE  OPENING  SOLENOID 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS /RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  OF  LH2  RECIRC  DISCONNECT 
VALVE  OPENING  SOLENOID  TO  CLOSE  RESULTING  IN  LH2  LEAK  OVERBOARD 
WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-378 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4330 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LH2  RE CIRC  DISCONNECT  VALVE  CLOSING  SOLENOID 

( LV5 1 ) 

FAILURE  MODE:  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  RECIRC  DISCONNECT  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  1/1 

ONORBIT:  3/3 

DEORBIT:  3/3 

LANDING/SAFING:  3/3 

ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 

REDUNDANCY  SCREENS:  A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION, 

FAILURE 

OR  PIECE-PART 

STRUCTURAL 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  OF  LH2  RECIRC  DISCONNECT 
VALVE  CLOSING  SOLENOID  TO  OPEN  RESULTING  IN  LH2  LEAK  OVERBOARD 
WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-379 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4331 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  LH2  RECIRC  DISCONNECT  VALVE  CLOSING  SOLENOID 

(LV51) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  RECIRC  DISCONNECT  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

1/1 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  TO  KEEP  LH2  RECIRC  DISCONNECT 
VALVE  CLOSING  SOLENOID  OPEN  RESULTING  IN  LH2  LEAK  OVERBOARD  WITH 
EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-380 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4332 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM: 

( LV5 1 ) 

FAILURE  MODE: 
LEAKAGE 


LH2  RECIRC  DISCONNECT  VALVE  CLOSING  SOLENOID 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  RECIRC  DISCONNECT  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC2 8 4 -04 04 -00 12 


CAUSES: 

FAILURE 


VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP 
CLOSING  SOLENOID  CLOSED. 


THE  LH2  RECIRC  DISCONNECT  VALVE 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-381 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4340 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  1/1 


ITEM: 

( LV7  2 ) 

FAILURE  MODE: 


LH2  FEED  RTLS  INBOARD  DUMP  VALVE  OPENING  SOLENOID 
FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  RTLS  INBOARD  DUMP  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LH2  RTLS  FEEDLINE  DUMP  FAILURE  AND 
LH2  LEAKAGE  OVERBOARD  THROUGH  FEEDLINE  RELIEF  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-382 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4341 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

1/1 


ITEM: 

( LV7  2 ) 

FAILURE  MODE: 


LH2  FEED  RTLS  INBOARD  DUMP  VALVE  OPENING  SOLENOID 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A. J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  RTLS  INBOARD  DUMP  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 

HDW/FUNC 

3/3 

ABORT 

RTLS: 

HDW/FUNC 

1/1 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

f 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-04 04-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

IOSS  OF  LIFE/VEHICLE  DUE  TO  LH2  RTLS  FEEDLINE  DUMP  FAILURE  AND 
LH2  LEAKAGE  OVERBOARD  THROUGH  FEEDLINE  RELIEF  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-383 


independent  orbiter  assessment 

ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/03/86 

MPS 

4342 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

( LV7  2 ) 

FAILURE  MODE: 
LEAKAGE 


LH2  FEED  RTLS  INBOARD  DUMP  VALVE  OPENING  SOLENOID 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J .MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  RTLS  INBOARD  DUMP  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LH2  RTLS  FEEDLINE  DUMP  VALVES  FAIL 
OPEN  AND  LH2  LEAKAGE  OVERBOARD  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-384 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

MPS 

4350 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  1/1 


ITEM: 

( LV7  3 ) 

FAILURE  MODE: 


LH2  FEED  RTLS  OUTBOARD  DUMP  VALVE  OPENING  SOLENOID 
FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  RTLS  OUTBOARD  DUMP 

5) 

6) 

7) 

8) 

9) 


VALVE  OPENING  SOLENOID 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  3/3 

ONORBIT:  3/3 

DEORBIT:  3/3 

LANDING/SAFING:  3/3 

ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 

HDW/FUNC 

1/1 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION, 

FAILURE 

OR  PIECE-PART 

STRUCTURAL 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LH2  RTLS  FEEDLINE  DUMP  FAILURE  AND 
LH2  LEAKAGE  OVERBOARD  THROUGH  FEEDLINE  RELIEF  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-385 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

MPS 

4351 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  1/1 


ITEM:  LH2  FEED  RTLS  OUTBOARD  DUMP  VALVE  OPENING  SOLENOID 

(LV73 ) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  RTLS  OUTBOARD  DUMP  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAF ING : 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LH2  RTLS  FEEDLINE  DUMP  FAILURE  AND 
LH2  LEAKAGE  OVERBOARD  THROUGH  FEEDLINE  RELIEF  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-386 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

MPS 

4352 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

( LV7  3 ) 

FAILURE  MODE: 
LEAKAGE 


LH2  FEED  RTLS  OUTBOARD  DUMP  VALVE  OPENING  SOLENOID 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  RTLS  OUTBOARD  DUMP  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  2/1R 

ONORBIT:  3/3 

DEORBIT:  3/3 

LANDING/ SAFING:  3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 

REDUNDANCY  SCREENS:  A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION, 

FAILURE 

OR  PIECE-PART 

STRUCTURAL 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LH2  RTLS  FEEDLINE  DUMP  VALVES  FAIL 
OPEN  AND  LH2  LEAKAGE  OVERBOARD  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-387 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

MPS 

4360 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


LH2  FEED  MANIFOLD  RTLS  PRESS  VALVE  (LV74,LV75) 
FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  MANIFOLD 

5) 

6) 

7) 

8) 

9) 


RTLS  PRESS  VALVE 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0002 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  LH2  FEED  MANIFOLD  RTLS  PRESS 
VALVE.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-388 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

MPS 

4361 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM: 

FAILURE  MODE: 


LH2  FEED  MANIFOLD  RTLS  PRESS  VALVE  (LV74.LV75) 
FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  MANIFOLD  RTLS  PRESS  VALVE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0002 


FAILURE  VIBRATI0N'  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

IOSS  OF  CAPABILITY  TO  KEEP  THE  LH2  FEED  MANIFOLD  RTLi 
SOLENOID  OPEN.  SYSTEM  DEGRADATION. 


PRESS  VALVE 


REFERENCES : 


REPORT  DATE  01/16/87 


C-389 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

MPS 

4362 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  LH2  FEED  MANIFOLD  RTLS  PRESS  VALVE  (LV74,LV75) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

LH2  FEED  MANIFOLD  RTLS  PRESS  VALVE 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0403-0002 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE:  „m_„ 
LOSS  OF  LIFE/VEHICLE  DUE  TO  HELIUM  INGESTION  INTO  ALL  THREE  MAIN 
ENGINES  RESULTING  IN  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-390 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

MPS 

4370 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76) 

FAILURE  MODE:  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  L02  OVERBOARD  BLEED  VALVE  OPENING 
RESULTING  IN  L02  LEAKAGE  OVERBOARD  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-391 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

MPS 

4371 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ p 3 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  L02  OVERBOARD  BLEED  VALVE  OPENING 
RESULTING  IN  L02  LEAKAGE  OVERBOARD  WITH  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-392 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

MPS 

4372 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
LEAKAGE 


L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76) 
FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 
HDW/FUNC  ABORT 


HDW/FUNC 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  THE  L02  OVERBOARD  BLEED  VALVE  CLOSING 
SOLENOID.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-393 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/04/86 

SUBSYSTEM:  MPS 

MDAC  ID:  4380 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

(LV77 , LV78) 

FAILURE  MODE:  FAILS  TO  OPEN 


L02  POGO  ACCUM  RECIRC  VALVE  CLOSING  SOLENOID 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  POGO  ACCUM  RECIR  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  THE  L02  POGO  ACCUM  RECIRC  VALVE. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-394 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/04/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4381  ABORT:  3/3 

ITEM:  L02  POGO  ACCUM  RECIRC  VALVE  CLOSING  SOLENOID 

(LV77 , LV78 ) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 

LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  POGO  ACCUM  RECIR  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  THE  L02  POGO  ACCUM  RECIRC  VALVE. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-395 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

MPS 

4382 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  L02  POGO  ACCUM  RECIRC  VALVE  CLOSING  SOLENOID 

(LV77 , LV78 ) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  POGO  ACCUM  RECIR  VALVE  CLOSING  SOLENOID 

5) 

6) 

7) 

3) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/ VEHICLE  DUE  TO  FAILURE  OF  L02  POGO  SUPPRESSION 
RESULTING  IN  VEHICLE  STRUCTURAL  DAMAGE  AND  LOSS  OF  FLIGHT 
CONTROL. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-396 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/05/86 

MPS 

4390 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  HI  POINT  BLEED  VALVE  OPENING  SOLENOID  (LV79) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  HI  POINT  BLEED  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  3/3 

ONORBIT:  3/3 

DEORBIT:  3/3 

LANDING/SAFING:  3/3 

ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 

CAUSES:  VIBRATION,  CONTAMINATION, 

FAILURE 

OR  PIECE-PART 

STRUCTURAL 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  LH2  HI  POINT  BLEED  VALVE  OPENING 
SOLENOID.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-397 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/05/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4391  ABORT:  3/3 

ITEM:  LH2  HI  POINT  BLEED  VALVE  OPENING  SOLENOID  (LV79) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  HI  POINT  BLEED  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  OPEN  THE  LH2  HI  POINT  BLEED  VALVE 
OPENING  SOLENOID.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-398 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/05/86 

MPS 

4392 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  LH2  HI  POINT  BLEED  VALVE  OPENING  SOLENOID  (LV79) 
FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 
LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  HI  POINT  BLEED  VALVE  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0012 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  TO  CLOSE  THE  LH2  HI  POINT 
BLEED  VALVE  OPENING  SOLENOID  RESULTING  IN  LH2  LEAK  OVERBOARD  WITH 
LOSS  OF  ALL  FUNCTIONAL  REDUNDANCY. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-399 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4400 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  PREVALVE  REDUNDANT  CLOSING  SOLENOID 

(LV80, LV81,LV82) 

FAILURE  MODE:  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  REDUNDANT  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 J B[F]  C[P] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  OF  L02  PREVALVE  TO  CLOSE  AT 
MECO  RESULTING  IN  SSME  PUMP  OVERSPEED  AND  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-400 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4401 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  PRE VALVE  REDUNDANT  CLOSING  SOLENOID 

( LV8  0 , LV8 1 , LV8  2 ) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  REDUNDANT  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  OF  L02  PREVALVE  TO  CLOSE  AT 
MECO  RESULTING  IN  SSME  PUMP  OVERSPEED  AND  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-401 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

11/25/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

MPS 

FLIGHT: 

3/3 

MDAC  ID: 

4402 

ABORT: 

3/3 

ITEM: 

L02  PREVALVE 

REDUNDANT  CLOSING  SOLENOID 

( LV8  0 , LV8 1 , LV8  2 ) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  REDUNDANT  CLOSING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRE LAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  KEEP  THE  SOLENOID  CLOSED.  SYSTEM 
DEGRADATION.  L02  PREVALVE  REMAINS  CLOSED. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-402 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4410 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  PRE VALVE  REDUNDANT  OPENING  SOLENOID 

( LV8  3 , LV8  4 , LV8  5 ) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  REDUNDANT  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  SOLENOID  VALVE.  SYSTEM 
DEGRADATION.  L02  PREVALVE  REMAINS  OPEN  WITHOUT  HELIUM  PRESSURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-403 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/25/86 

MPS 

4411 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  PREVALVE  REDUNDANT  OPENING  SOLENOID 

( LV8  3 , LV8  4 , LV8  5 ) 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN 
1)  MPS 


HIERARCHY: 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

L02  PREVALVE  REDUNDANT  OPENING  SOLENOID 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  OPEN  THE  SOLENOID  VALVE.  SYSTEM 
DEGRADATION.  L02  PREVALVE  REMAINS  OPEN  WITHOUT  HELIUM  PRESSURE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-404 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

11/25/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

MPS 

FLIGHT: 

2/1R 

MDAC  ID: 

4412 

ABORT: 

2/1R 

ITEM: 

(LV83 , LV84 

L02  PREVALVE  REDUNDANT  OPENING  SOLENOID 
, LV85) 

FAILURE  MODE:  FAILS  TO  CLOSE, 

LEAKAGE 

FAILS  TO  REMAIN  CLOSED, 

INTERNAL 

LEAD  ANALYST:  A. J. MARINO 

SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  REDUNDANT  OPENING  SOLENOID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0404-0021 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  FAILURE  OF  L02  PREVALVE  TO  CLOSE  AT 
MECO.  RESULTING  IN  SSME  PUMP  OVERSPEED  AND  EXPLOSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-405 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4420 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  TANK  GND  PRE-PRESS  (ORB/GND)  DISC.  (ORB  HALF) 

(PD9) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

HELIUM  SUPPLY 
PNEUMATIC  HELIUM 

L02  TANK  GND  PRE-PASS  (ORB/GND)  DISC  (ORB  HALF) 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS: 

2/1R 

TAL: 

/NA 

AOA: 

/NA 

ATO: 

/NA 

A [ 2 ] 

B [ P ] 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  L02  ULLAGE  PRESSURE  RESULTS  IN  ALL  THREE  MAIN  ENGINES 
SHUTDOWN  AND  LOSS  OF  LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-406 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4421 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  TANK  GND  PRE-PRESS  (ORB/GND)  DISC.  (ORB  HALF) 

(PD9) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  TANK  GND  PRE-PASS  (ORB/GND)  DISC  (ORB  HALF) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 
LANDING/ SAFING: 

/NA 

/NA 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  HELIUM  PREPRESS  DURING  PRELAUNCH.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-407 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4422 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  L02  TANK  GND  PRE-PRESS  (ORB/GND)  DISC.  (ORB  HALF) 

(PD9) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  TANK  GND  PRE-PASS  (ORB/GND)  DISC  (ORB  HALF) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

/NA 

AO  A: 

2/1R 

DEORBIT: 

/NA 

ATO: 

2/1R 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  L02  ULLAGE  PRESSURE  RESULTS  IN  ALL  THREE  MAIN  ENGINES 
SHUTDOWN  AND  LOSS  OF  LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-408 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4430 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  LH2  TANK  GND  PRE -PRESS  (ORB/GND)  DISC.  (ORB  HALF) 

(PD10) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  TANK  GND  PRE-PRESS  (ORB/GND)  DISC  (ORB  HALF) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

/NA 

AOA: 

2/1R 

DEORBIT: 
LANDING/ SAFING: 

/ NA 
/NA 

ATO: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LH2  ULLAGE  PRESSURE  RESULTS  IN  ALL  THREE  MAIN  ENGINES 
SHUTDOWN  AND  LOSS  OF  LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-409 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4431 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  LH2  TANK  GND  PRE-PRESS  (ORB/GND)  DISC.  (ORB  HALF) 

(PD10) 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  TANK  GND  PRE-PRESS  (ORB/GND)  DISC  (ORB  HALF) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  HELIUM  PREPRESS  DURING  PRELAUNCH.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-410 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4432 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  LH2  TANK  GND  PRE-PRESS  (ORB/GND)  DISC.  (ORB  HALF) 

(PD10) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  TANK  GND  PRE-PRESS  (ORB/GND)  DISC  (ORB  HALF) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

/NA 

AOA: 

2/1R 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LH2  ULLAGE  RESULTS  IN  ALL  THREE  MAIN  ENGINES  SHUTDOWN  AND 
LOSS  OF  LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-411 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/17/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  4460  ABORT:  1/1 

ITEM:  TEST  PORT,  PNEU  HE  OUTLET  (TP1) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  TEST  PORT,  PNEU  HE  OUTLET 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415756-002 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  BECAUSE  PNEUMATIC  HELIUM  WILL  NOT  BE 
AVAILABLE  FOR  MPS  DUMP  VALVE  ACTUATION  AND  AFT  COMPARTMENT  PURGE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-412 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/17/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4470  ABORT:  3/3 

ITEM:  TEST  PORT,  LH2  REPRESS  REG  OUTLET  (TP3) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  TEST  PORT,  LH2  REPRESS  REG  OUTLET 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  /NA  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415532-001 

CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  AND  REPRESS  THE  LH2  REPRESS  MANIFOLD. 
SYSTEM  DEGRADATION. 


REFERENCES : 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REPORT  DATE  01/16/87 


C-413 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4480 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  TEST  PORT,  L02  REPRESS  REG  OUTLET  (TP4) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  TEST  PORT,  L02  REPRESS  REG  OUTLET 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/ NA 

AOA: 

3/3 

DEORBIT: 
LANDING/S AFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415532-001 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  AN  REPRESS  THE  L02  REPRESS  MANIFOLD. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-414 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4490 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  TEST  PORT,  L02  PREPRESS  DISC.  CHECK  VALVE  (TP9) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  TEST  PORT,  L02  PREPRESS  DISC. 

5) 

6) 

7) 

8) 

9) 


CHECK  VALVE 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

/ NA 

AOA: 

2/1R 

DEORBIT: 

LANDING/SAFING: 

/NA 

/NA 

ATO: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415446-001 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  L02  ULLAGE  PRESSURE  RESULTS  IN  ALL  THREE  MAIN  ENGINES 
SHUTDOWN  AND  LOSS  OF  LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-415 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4500 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  TEST  PORT,  LH2  PREPRESS  DISC.  CHECK  VALVE  (TP10) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  TEST  PORT,  LH2  PREPRESS  DISC. 

5) 

6) 

7) 

8) 

9) 


CHECK  VALVE 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

/NA 

AO  A: 

2/1R 

DEORBIT: 

/NA 

ATO: 

2/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

/NA 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415446-001 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LH2  ULLAGE  PRESSURE  RESULTS  IN  ALL  THREE  MAIN  ENGINES 
SHUTDOWN  AND  LOSS  OF  LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-416 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4510 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  2/2 


ITEM:  TEST  PORT,  PNEU  SUPPLY  HELIUM  (TP29) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  TEST  PORT,  PNEU  SUPPLY  HELIUM 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

2/2 

2/2 

TAL: 

2/2 

3/3 

AOA: 

2/2 

3/3 

ATO: 

2/2 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415790-001 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  PNEUMATIC  HELIUM  FOR  MPS  VALVE 
ACTUATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-417 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/17/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4520  ABORT:  3/3 

ITEM:  TEST  PORT,  CHECK  VALVE  CV24  LEAKAGE  (TP36) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  TEST  PORT,  CHECK  VALVE  CV24  LEAKAGE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/NA 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415133-001 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  AND  REPRESS  THE  GH2  PRESS  MANIFOLD. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-418 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4530 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  PNEU  VALVE  HE  SUPPLY  REGULATOR  (PR4) 

FAILURE  MODE:  RESTRICTED  FLOW,  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  VALVE  HE  SUPPLY  REGULATOR 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

/NA 

AOA: 

2/1R 

DEORBIT: 

/NA 

ATO: 

2/1R 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC2 8 4-03 9 9-004 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ALL  REDUNDANCY  FOR  MPS  VALVE 
ACTUATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-419 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4531 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  PNEU  VALVE  HE  SUPPLY  REGULATOR  (PR4) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  MID-TRAVEL 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  VALVE  HE  SUPPLY  REGULATOR 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/ NA 

AO  A: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0399-004 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  REGULATE  PNEUMATIC  HELIUM  FLOW  FOR  MPS 
VALVE  ACTUATION  AND  MPS  DUMP  AND  REPRESS.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-420 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4540 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  L02  MANIF  REPRESS  REGULATOR  (PR5) 

FAILURE  MODE:  RESTRICTED  FLOW,  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J. MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  MANIF  REPRESS  REGULATOR 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

/NA 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0399-004 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  THE  L02  MANIFOLD  RESULTS  IN  LOSS  OF 
LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-421 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/17/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4541  ABORT:  3/3 

ITEM:  L02  MANIF  REPRESS  REGULATOR  (PR5) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  MID-TRAVEL 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  MANIF  REPRESS  REGULATOR 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/NA 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0399-004 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  REGULATE  HELIUM  PRESSURE  DURING  MPS  L02 
MANIFOLD  DUMP  AND  REPRESS.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-422 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4550 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  LH2  MANIF  REPRESS  REGULATOR  (PR6) 

FAILURE  MODE:  RESTRICTED  FLOW,  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  MANIF  REPRESS  REGULATOR 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

HDW/FUNC 
2/1R 
2/1R 
2/1R 
2/1R 


C [ P ] 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

/NA 

AOA: 

DEORBIT: 

2/1R 

ATO: 

LANDING/SAFING: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0399-004 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

LOSS  LIFE/VEHICLE  DUE  TO  FAILURE  TO  REPRESS  THE  LH2  MANIFOLD 
RESULTING  IN  RUPTURE  AND  LH2  LEAK. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-423 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/17/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4551  ABORT:  3/3 

ITEM:  LH2  MANIF  REPRESS  REGULATOR  (PR6) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  MID-TRAVEL 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  MANIF  REPRESS  REGULATOR 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/NA 

AO  A: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0399-004 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  REGULATE  HELIUM  DURING  LH2  MANIFOLD  DUMP 
AND  REPRESS.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-424 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

11/17/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

MPS 

FLIGHT: 

3/3 

MDAC  ID: 

4560 

ABORT: 

3/3 

ITEM: 

FAILURE  MODE 

PNEU  VALVE  HE 
!:  FAILS  TO  OPEN 

SUPPLY  RELIEF  VALVE  (RV4) 

LEAD  ANALYST 

':  A.  J.  MARINO 

SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  VALVE  HE  SUPPLY  RELIEF  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/NA 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0398-0005 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  REGULATE  PNEUMATIC  HELIUM  FOR  MPS  VALVE 
ACTUATION  AND  MPS  DUMP  AND  REPRESS.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-425 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/17/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4561  ABORT:  3/3 

ITEM:  PNEU  VALVE  HE  SUPPLY  RELIEF  VALVE  (RV4) 

FAILURE  MODE:  FAILS  TO  CLOSE,  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  VALVE  HE  SUPPLY  RELIEF  VALVE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/NA 

AO  A: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC284-0398-0005 


CAUSES:  VIBRATION,  CONTAMINATION,  OR  PIECE-PART  STRUCTURAL 

FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  USE  PNEUMATIC  HELIUM  FOR  MPS  VALVE 
ACTUATION.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-426 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4570 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/2 

2/2 


ITEM:  PNEU  VALVE  HE  SUPPLY  TANK  (TK4) 

FAILURE  MODE:  EXTERNAL  LEAKAGE,  STRUCTURAL  FAILURE  (RUPTURE) 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  VALVE  HE  SUPPLY  TANK 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/2 

LIFTOFF: 

2/2 

TAL: 

2/2 

ONORBIT: 

/NA 

AOA: 

2/2 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

2/2 

REDUNDANCY  SCREENS: 

A [ NA] 

B (NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC282-0082-0010 


CAUSES:  VIBRATION  OR  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  PNEUMATIC  HELIUM  FOR  MPS  VALVE  ACTUATOR  AND  MPS  DUMP  AND 
REPRESS.  LOSS  OF  CAPABILITY  TO  FEED  PNEUMATIC  HELIUM  TO  AN 
ENGINE  HELIUM  SYSTEM  WILL  RESULT  IN  LOSS  OF  MISSION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-427 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4580 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  L02  PREVALVE  PNEU  ACCUMULATOR  (AU5) 

FAILURE  MODE:  EXTERNAL  LEAKAGE,  STRUCTURAL  FAILURE  (RUPTURE) 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  L02  PREVALVE  PNEU  ACCUMULATOR 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

/NA 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

2/1R 
A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC282-0070-0001 


CAUSES:  VIBRATION  OR  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  L02  MANIFOLD  RESULTS  IN  LOSS  OF 
LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-428 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4590 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  LH2  PRE VALVE  PNEU  ACCUMULATOR  (AU6) 

FAILURE  MODE:  EXTERNAL  LEAKAGE,  STRUCTURAL  FAILURE  (RUPTURE) 


LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  PRE  VALVE  PNEU  ACCUMULATOR 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

/NA 

AO  A: 

2/1R 

DEORBIT: 

LANDING/SAFING: 

2/1R 

2/1R 

ATO: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC282-0070-0001 


CAUSES:  VIBRATION  OR  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  L02  MANIFOLD  RESULTS  IN  LOSS  OF 
LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-429 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/17/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4600  ABORT:  3/3 

ITEM:  LH2  FEED  MANIF  RTLS  REPRESS  ORIFICE  (RP9) 

FAILURE  MODE:  RESTRICTED  FLOW 

LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  LH2  FEED  MANIF  RTLS  REPRESS  ORIFICE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/NA 

AO  A: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  V070-415545-001 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  LH2  RTLS  MANIFOLD.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-430 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/17/86 

MPS 

4610 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


PNEU  HE  SUPPLY  FILTER  (FL5) 
RESTRICTED  FLOW 


LEAD  ANALYST:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEU  HE  SUPPLY  FILTER 

5) 

6) 

7) 

8) 

9) 


SUBSYS  LEAD:  A.J.MARINO 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC  ABORT  HDW/FUNC 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

/NA 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION: 
PART  NUMBER: 


AFT  FUSELAGE 
ME2 8 6 -005 6-00 01 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  USE  PNEUMATIC  HELIUM  FOR  MPS  VALVE 
ACTUATOR.  SYSTEM  DEGRADATION. 


REFERENCES : 


HDW/FUNC 

3/3 

3/3 


REPORT  DATE  01/16/87 


C-431 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/18/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  3/3 

MDAC  ID:  4620  ABORT:  3/3 

ITEM:  PNEUMATIC  HE  FILL  LINE  (.50", .375”, .625"  DIA) 

FAILURE  MODE:  STRUCTURAL  FAILURE  (RUPTURE) 

LEAD  ANALYST:  A. J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEUMATIC  HELIUM  FILL  LINE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

/NA 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER: 


CAUSES:  VIBRATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  USE  PNEUMATIC  HELIUM  FOR  MPS  VALVE 
ACTUATION.  SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-432 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/18/86 

MPS 

4630 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  PNEUMATIC  HE  PRESSURE  LINE  (.50"  DIA) 

FAILURE  MODE:  STRUCTURAL  FAILURE  (RUPTURE) 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEUMATIC  HE  PRESSURE  LINE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

/NA 

AO  A: 

1/1 

DEORBIT: 
LANDING/S AFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER: 

CAUSES:  VIBRATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  L02  MANIFOLD  RESULTS  IN  LOSS  OF 
LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-433 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/18/86 

MPS 

4640 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  PNEUMATIC  HE  PRESS  VALVE  ACTUATION  LINE  (.25",. 38" 

DIA) 

FAILURE  MODE:  STRUCTURAL  FAILURE  (RUPTURE) 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEUMATIC  HE  PRESS  VALVE  ACTUATION  LINE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

/NA 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER: 


CAUSES:  VIBRATION,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS /RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  L02  MANIFOLD  RESULTS  IN  LOSS  OF 
LIFE/VEHICLE. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-434 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/18/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  MPS  FLIGHT:  1/1 

MDAC  ID:  4650  ABORT:  1/1 

ITEM:  PNEUMATIC  HELIUM  INTERCONNECT  LINE 

(.63M,1.00",.50"  DIA) 

FAILURE  MODE:  STRUCTURAL  FAILURE  (RUPTURE) 

LEAD  ANALYST:  A.J.MARINO  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  PNEUMATIC  HE  INTERCONNECT  LINE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

/NA 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER: 


CAUSES:  VIBRATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  DUMP  THE  L02  MANIFOLD  RESULTS  IN  LOSS  OF 
LIFE/VEHICLE . 


REFERENCES : 


REPORT  DATE  01/16/87 


C-435 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/05/86 

MPS 

4660 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  GN2  PURGE  (ORB/GND)  DISC.  (ORB  HALF)  (PD14) 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 


LEAD  ANALYST:  A. J. MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  GN2  PURGE  (ORB/GND)  DISC. 

5) 

6) 

7) 

8) 

9) 


(ORB  HALF) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  VIBRATION,  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  THE  GN2  PURGE  DISCONNECT  VALVE. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-436 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/05/86 

MPS 

4662 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


GN2  PURGE  (ORB/GND)  DISC.  (ORB  HALF)  (PD14) 
FAILS  TO  OPEN 


LEAD  ANALYST:  A.J.MARINO 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  GN2  PURGE  (ORB/GND)  DISC. 

5) 

6) 

7) 

8) 

9) 


(ORB  HALF) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  VIBRATION,  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  PURGE  THE  SSME'S  PRELAUNCH.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-437 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/05/86 

MPS 

4664 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  GN2  PURGE  (ORB/GND)  DISC.  (ORB  HALF)  (PD14) 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  GN2  PURGE  (ORB/GND)  DISC.  (ORB  HALF) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  VIBRATION,  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  PURGE  SSME’S  WITH  NITROGEN  PRELAUNCH. 
SYSTEM  DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-438 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/05/86 

MPS 

4666 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  GN2  PURGE  (ORB/GND)  DISC.  (ORB  HALF)  (PD14) 

FAILURE  MODE:  FAILS  TO  OPEN,  EXTERNAL  LEAKAGE,  FAILS  TO  CLOSE, 

FAILS  TO  REMAIN  CLOSED,  INTERNAL  LEAKAGE 


LEAD  ANALYST:  A.J. MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  HELIUM  SUPPLY 

3)  PNEUMATIC  HELIUM 

4)  GN2  PURGE  (ORB/GND)  DISC. 

5) 

6) 

7) 

8) 

9) 


(ORB  HALF) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

/NA 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  FUSELAGE 

PART  NUMBER:  MC276-0003-0007 


CAUSES:  VIBRATION,  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSS  OF  CAPABILITY  TO  CLOSE  GN2  DISCONNECT  VALVE.  SYSTEM 
DEGRADATION. 


REFERENCES : 


REPORT  DATE  01/16/87 


C-439 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5000 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  L02  PRE VALVE  CONTROL  CIRCUIT 

FAILURE  MODE:  ALL  CREDIBLE  MODES:  OPENS,  SHORTS,  LOSS  OF  POWER 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  AFT  LCA  1,  2 & 3 

7)  L02  PREVALVE  CONTROL  CIRCUIT 

8) 

9) 


(PV1,  PV2  & PV3) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  TEMPERATURE,  MISHANDLING/ABUSE 


EFFECTS/RATIONALE : 

THESE  CIRCUITS  PROVIDE  POWER,  CONTROL  AND  MONITORING  FOR  THE  L02 
PREVALVES . 

THE  CRITICALITY  3 ITEMS  REFERENCED  ON  THIS  SHEET  INCLUDE  78 
RESISTORS  AND  72  DIODES.  THE  ITEMS  WITH  A CRITICALITY  OTHER  THAN 
3 ARE  LISTED  SEPERATELY  UNDER  MDAC  ID  5001  THROUGH  5076. 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-440 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5001 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  L02  PRE VALVE  TOGGLE  SWITCH 

FAILURE  MODE:  FAILS  (SHORTS)  (FALSE  OPEN  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  AFT  LCA  1,  2 & 3 

7)  PANEL  R4 

8)  L02  PREVALVE  TOGGLE  SWITCH  (3)  (Sll,  S12  & S13) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE  LAUNCH: 

/NA 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7456 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE . 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-441 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/22/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  3/1R 

MDAC  ID:  5002  ABORT:  3/1R 

ITEM:  L02  PRE VALVE  TOGGLE  SWITCH 

FAILURE  MODE:  FAILS  (SHORTS)  (FALSE  CLOSE  COMMAND) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  AFT  LCA  1,  2 & 3 

7)  PANEL  R4 

8)  L02  PREVALVE  TOGGLE  SWITCH  (3)  (Sll,  S12  & S13) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7456 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PREVALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-442 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5003 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  FUSE  (1A)  (4  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN  (INHIBIT  CLOSE  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  AFT  LCA  1,  2 & 3 

7)  PANEL  R4 

8)  FUSE  (1A)  (12)  (F16  THROUGH  F24,  F49,  F50,  F51) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME451-0018-0100 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  STRESS,  CHEMICAL  DEGRADATION 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3).  IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE . 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-443 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5004 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  FUSE  (1A)  (4  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN  (INHIBIT  OPEN  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  AFT  LCA  1,  2 & 3 

7)  PANEL  R4 

8)  FUSE  (1A)  (12)  (F16  THROUGH  F24,  F49,  F50,  F51) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO  A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME451-0018-0100 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  STRESS,  CHEMICAL  DEGRADATION 


EFFECTS /RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PRE VALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-444 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5011 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  MDM  (FA1) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  OFF  (INHIBITS  CLOSING 

SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAY  4 

5)  L02  PREVALVE  CLOSING  SOLENOID  CIRCUITS 

6)  MDM  (FA1)  (54V72A7) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

LOCATION:  AVIONICS 

BAY  4 

PART  NUMBER:  SEE  REFERENCES 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE . 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-445 


C - 0 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/20/87 

EPD&C/MPS 

5012 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


FAILURE  MODE:  PREMATURE/ ERRONEOUS  OFF  (INHIBITS  CLOSING 

SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAY  5 _^TTTrric< 

5)  L02  PREVALVE  CLOSING  SOLENOID  CIRCUITS 

6)  MDM  (FA2)  (55V72A8) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

/NA 

RTLS 

2/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

A [ 2 ] B ( P ] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


THE^FAILURE^OF^THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PVI  PV2  A PV3).  IF  THIS  FAILURE  OCCURS  DURING  THE 
MI*:0  SEQUENCE,'  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 


THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED, 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS 


UNCONTAINED  ENGINE 
THE  LOSS  OF  THE 


VEHICLE . 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-446 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5013 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 
SOLENOIDS) 


MDM  (FA3) 

PREMATURE/ERRONEOUS  OFF  (INHIBITS  CLOSING 


HDW/FUNC 

2/1R 

2/1R 


LEAD  ANALYST:  HOLDEN/LOWERY  SOBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

4)  avionics^bay  i1  PER  SSME)  (PV1'  PV2  * PV3> 

6)  “dm  S0LEH°ID  CIRCDITS 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

/NA 

RTLS 

2/1R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES: 

SHOCK, 


PIECE-PART  STRUCTURAL  FAILURE, 
VIBRATION,  THERMAL  SHOCK 


CONTAMINATION,  MECH 


EFFECTS/RATIONALE : 

PREVALVES^PVl  £A?L*!ILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 

TzS'Szssssrxss  jk, 


^i»^.«AILURE  C0ULD  CAUSE  A PUMP  OVERSPEED, 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  1 
VEHICLE • 


UNCONTAINED  ENGINE 
THE  LOSS  OF  THE 


REFERENCES:  SSWH  DWG  10.11A; 

11.1,  12  & 12.1 


VS72-941099  SHEETS  10, 


10.1, 


11, 


REPORT  DATE  01/16/87 


C-447 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/20/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

2/1R 

MDAC  ID: 

5014 

ABORT: 

2/1R 

ITEM: 

MDM  (FA4) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS 

OFF  (INHIBITS  CLOSING 

SOLENOIDS) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAY  6 

5)  L02  PREVALVE  CLOSING  SOLENOID  CIRCUITS 

6)  MDM  (FA4)  (56V72A10) 

7) 

a) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3).  IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE . 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-448 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5015 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  MDM  (FA1) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  OFF  (INHIBITS  ACTIVATING 

OPENING  SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAY  4 

5)  L02  PREVALVE  OPENING  SOLENOID  CIRCUITS 

6)  MDM  (FA1)  (54V72A7) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/1R 

RTLS 

LIFTOFF: 

3/1R 

TAL: 

ONORBIT: 

3/2R 

AO  A: 

DEORBIT: 

3/1R 

ATO: 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AVIONICS  BAY  4 

PART  NUMBER:  SEE  REFERENCES 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PREVALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-449 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5016 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  MDM  (FA2) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  OFF  (INHIBITS  ACTIVATING 

OPENING  SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAY  5 

5)  L02  PREVALVE  OPENING  SOLENOID  CIRCUITS 

6)  MDM  (FA2)  (55V72A8) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PREVALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-450 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5017 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  MDM  (FA3) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  OFF  (INHIBITS  ACTIVATING 

OPENING  SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/ LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAY  6 

5)  L02  PREVALVE  OPENING  SOLENOID  CIRCUITS 

6)  MDM  (FA3)  (56V72A9) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/1R 

RTLS 

LIFTOFF: 

3/1R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/1R 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PREVALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 

UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 

FIRE/ EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-451 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5018 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  MDM  (FA4) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  OFF  (INHIBITS  ACTIVATING 

OPENING  SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAY  6 

5)  L02  PREVALVE  OPENING  SOLENOID  CIRCUITS 

6)  MDM  (FA4)  (56V72A10) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PREVALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-452 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5019 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  MDM  (FA1) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  ON  (PREMATURELY  ACTIVATES 

OPENING  SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 


1) 

EPD&C/MPS 

2) 

02 

3) 

L02  PREVALVE 

(1  PER  SSME)  (PV1,  PV2  & 

4) 

AVIONICS  BAY 

4 

5) 

L02  PREVALVE 

OPENING  SOLENOID  CIRCUITS 

6) 

MDM  (FA1)  (54V72A7) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/S AFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  4 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE/  CONTAMINATION/  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-453 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5020 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  MUM  (FA«t; 

FAILURE  MODE:  PREMATURE/ERRONEOUS  ON  (PREMATURELY  ACTIVATES 

OPENING  SOLENOIDS) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPD&C/MPS 

2) 

02 

, PV2  & PV3) 

3) 

L02  PRE VALVE 

(1 

PER  SSME)  (PV1 

4) 

AVIONICS  BAY 

5 

5) 

L02  PREVALVE 

OPENING  SOLENOID 

CIRCUITS 

6) 

MDM  (FA2)  (55V72A8) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE . 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-454 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/22/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/1R 

MDAC  ID: 

5021 

ABORT: 

3/1R 

ITEM: 

MDM  (FA3) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  ON  (PREMATURELY  ACTIVATES 

OPENING  SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAY  6 

5)  L02  PREVALVE  OPENING  SOLENOID  CIRCUITS 

6)  MDM  (FA3)  (56V72A9) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/1R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

LOCATION:  AVIONICS 

BAY  6 

PART  NUMBER:  SEE  REFERENCES 

HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1  11 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-455 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/22/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  3/1R 

MDAC  ID:  5022  ABORT:  3/1R 

ITEM:  MDM  (FA4) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  ON  (PREMATURELY  ACTIVATES 

OPENING  SOLENOIDS) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAY  6 

5)  L02  PREVALVE  OPENING  SOLENOID  CIRCUITS 

6)  MDM  (FA4)  (56V72A10) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B ( P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-456 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5031 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (2  PER  CIRCUIT) 

FAILURE  MODE:  FAIL  ON  (FALSE  OPEN  COMMAND,  ACTIVATE  LV12,  LV14, 

LV16) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPD&C/MPS 

2) 

02 

3) 

L02  PREVALVE  (1  PER  SSME) 

(PV1,  PV2  & PV3) 

4) 

AVIONICS  BAYS  4,  5 & 6 

5) 

AFT  LCA  1,  2 & 3 

6) 

L02  PREVALVE  OPENING  SOLENOID  (LV12,  LV14  & LV16)  CIRCUIT 

7) 

HYBRID  DRIVER,  TYPE  3 (6) 

(54V76A121(2) , 55V76A122  (2) , 

56V76A123 (2) ) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C ( P ] 

LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE . 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-457 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5032 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (2  PER  CIRCUIT) 

FAILURE  MODE:  FUSE  FAIL  OPEN  (INHIBIT  LV12,  LV14  & LV16) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  LCA  1,  2 & 3 

6)  L02  PREVALVE  OPENING  SOLENOID  (LV12,  LV14  & LV16)  CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (6)  (54V76A121(2) , 55V76A122  (2) , 

56V76A123 (2) ) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO  A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PREVALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-458 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5033 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  HYBRID  DRIVER,  TYPE  1 

FAILURE  MODE:  FAIL  OFF  (INHIBIT  LV12,  LV14,  LV16) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  LCA  1,  2 & 3 

6)  L02  PREVALVE  OPENING  SOLENOID  (LV12,  LV14  & LV16)  CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  1 (54V76A121,  55V76A122,  56V76A123) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO  A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0261-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PREVALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-459 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5034 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (2  PER  CIRCUIT) 

FAILURE  MODE:  FAIL  ON  (FALSE  OPEN  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  L02  PREVALVE  OPENING  SOLENOID  (LV12,  LV14  & LV16)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (6)  (RPC38(3),  RPC42(3)) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

/NA 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  PCA  4,  5 & 6 

PART  NUMBER:  MC450-0017-1030 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURES  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-460 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5035 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  DIODE,  ISOLATION  (12A)  (2  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  CONDUCT  POWER 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  L02  PREVALVE  OPENING  SOLENOID  (LV12,  LV14  & LV16)  CIRCUIT 

7)  DIODE,  ISOLATION  (12A)  (6)  (A2CR30(3),  A2CR34(3)) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO  A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B[F]  C [ P ] 

LOCATION:  AFT  PCA  4,  5 & 6 

PART  NUMBER:  JANTX1N1204RA 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PREVALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-461 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5041 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


HYBRID  DRIVER,  TYPE  3 (2  PER  CIRCUIT) 

FUSE  FAIL  OPEN  (INHIBIT  LV13,  LV15,  LV17) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 
02 

L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

AVIONICS  BAYS  4,  5 & 6 
AFT  LCA  1 2 fit  3 

L02  PREVALVE  CLOSING  SOLENOID  (LV13,  LV15  & LV17)  CIRCUIT 
HYBRID  DRIVER,  TYPE  3 (6)  (54V76A121(2) , 55V76A122  (2)  , 

56V76A123 (2) ) 

8) 

9) 


2) 

3) 

4) 

5) 

6) 
7) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA 

1,  2 & 3 

PART  NUMBER:  MC477-0263-0002 

CAUSES:  PIECE-PART  STRUCTURAL 

FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


TH  E^ FAILURE"1' OFATH I S PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3).  IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 

THISTFAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-462 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5042 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  HYBRID  DRIVER,  TYPE  1 

FAILURE  MODE:  FAIL  OFF  (INHIBIT  LV13,  LV15,  LV17) 


HDW/FUNC 

2/1R 

2/1R 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 
02 

L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

AVIONICS  BAYS  4,  5 & 6 ’ 

AFT  LCA  1,  2 & 3 

L02  PREVALVE  CLOSING  SOLENOID  (LV13,  LV15  & LV17)  CIRCUIT 
HYBRID  DRIVER,  TYPE  1 (3)  (54V76Al2i,  BBVyIaIL;  56V76A123) 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

/NA 

RTLS 

2/1R 

TAL: 

3/3 

AO  A: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0261-0002 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE, 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


CONTAMINATION,  MECH 


EFFECTS/RATIONALE : 

°F  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 

S^A^(PV1'  PV2  & PV3)*  IF  THIS  failure  occurs  dtoing  the 

^ E®U^NCF / THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 


THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS 
VEHICLE. 


UNCONTAINED  ENGINE 
THE  LOSS  OF  THE 


REFERENCES:  SSWH  DWG  10.11A; 

11.1,  12  & 12.1 


VS72-941099  SHEETS  10, 


10.1, 


11, 


REPORT  DATE  01/16/87 


C-463 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5043 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (2  PER  CIRCUIT) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  OFF  (INHIBIT  LV13,  LV15,  LV17) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  L02  PREVALVE  CLOSING  SOLENOID  (LV13,  LV15  & LV17)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (6)  (RPC37(3),  RPC41(3)) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  PCA  1,  2 & 3 

PART  NUMBER:  MC450-0017-1030 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3).  IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE . 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-464 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5044 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  DIODE,  ISOLATION  (12 A)  (2  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  CONDUCT  POWER  (INHIBIT  LV13, 

LV15,  LV17) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PRE VALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  L02  PREVALVE  CLOSING  SOLENOID  (LV13,  LV15  & LV17)  CIRCUIT 

7)  DIODE,  ISOLATION  (12A)  (6)  (A2CR29(3),  A2CR33(3)) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  PCA  4,  5 & 6 

PART  NUMBER:  JANTX1N1204RA 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-465 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5051 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (2  PER  CIRCUIT) 

FAILURE  MODE:  FUSE  FAIL  OPEN  (INHIBIT  LV80,  LV81,  LV82) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  LCA  1,  2 & 3 

6)  L02  PREVALVE  REDUNDANT  CLOSING  SOLENOID  (LV80,  LV81  & LV82) 
CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (6)  (54V76A121(2) , 55V76A122  (2)  , 

56V76A123 (2) ) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE . 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-466 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5052 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (2  PER  CIRCUIT) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  OFF(INHIBIT  LV80,  LV81,  LV82) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  L02  PREVALVE  REDUNDANT  CLOSING  SOLENOID  (LV80,  LV81  & LV82) 
CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (6)  (RPC27(3),  RPC28(3)) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

LOCATION:  AFT  PCA 

4,  5 & 6 

PART  NUMBER:  MC450-0017-1030 

HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-467 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5053 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  DIODE,  ISOLATION  (12A)  (2  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  CONDUCT  POWER  (INHIBIT  LV80, 

LV81,  LV82) 


LEAD  ANALYST:  HOLDEN/ LOWERY 


SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  L02  PREVALVE  REDUNDANT  CLOSING  SOLENOID  (LV80,  LV81  & LV82) 
CIRCUIT 

7)  DIODE,  ISOLATION  (12A)  (6)  (A2CR19(3),  A2CR20(3)) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  PCA  4,  5 & 6 

PART  NUMBER:  JANTX1N1204RA 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-468 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5061 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (2  PER  CIRCUIT) 

FAILURE  MODE:  FAIL  ON  (FALSE  OPEN  COMMAND,  ACTIVATE  LV83,  LV84, 

LV85) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  LCA  1,  2 & 3 

6)  L02  PREVALVE  REDUNDANT  OPENING  SOLENOID  (LV83,  LV84  & LV85) 
CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (6)  (54V76A121(2) , 55V76A122  (2) , 
56V76A123 (2 ) ) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/ NA 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

I/DCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-469 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/22/87 

EPD&C/MPS 

5062 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM: 

FAILURE  MODE: 


HYBRID  DRIVER,  TYPE  3 (2  PER  CIRCUIT) 

FUSE  FAIL  OPEN  (INHIBIT  LV83,  LV84  & LV85) 


LEAD  ANALYST:  HOLDEN/LOWERY 


SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  LCA  1,  2 & 3 

6)  L02  PREVALVE  REDUNDANT  OPENING  SOLENOID  (LV83,  LV84  & LV85) 
CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (6)  (54V76A121(2) , 55V76A122  (2) , 
56V76A123 (2) ) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO  A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ P ] 

LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PREVALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-470 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5063 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (2  PER  CIRCUIT) 

FAILURE  MODE:  FAIL  ON  (FALSE  OPEN  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  L02  PREVALVE  REDUNDANT  OPENING  SOLENOID  (LV83,  LV84  & LV85) 
CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (6)  (RPC13(3),  RPC44(3)) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  PCA  4,  5 & 6 

PART  NUMBER:  MC450-0017-1030 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  PREVENT  THE  CLOSURE  OF  ONE  OF  THE 
PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS  DURING  THE 
MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE  L02  PUMP 
INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-471 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5064 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  DIODE,  ISOLATION  (12A)  (2  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  CONDUCT  POWER 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  L02  PREVALVE  REDUNDANT  OPENING  SOLENOID  (LV83,  LV84  & LV85) 
CIRCUIT 

7)  DIODE,  ISOLATION  (12A)  (6)  (A2CR35(3),  A2CR36(3)) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  PCA  4,  5 & 6 

PART  NUMBER:  JANTX1N12  04RA 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THIS  PART  WILL  ALLOW  ONE  OF  THE  PREVALVES  (PV1, 
PV2  & PV3)  TO  CLOSE  PREMATURELY  (FAIL  TO  REMAIN  OPEN). 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-472 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/26/87 

EPD&C/MPS 

5071 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  DIODE  (10  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN  (INHIBIT  OPEN  COMMAND  TO  OPENING 

SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/ LOWERY 


SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 
02 

L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 
AVIONICS  BAYS  4,  5 & 6 
DIODE  BOARDS  56V76A207,  208  & 209 
L02  PREVALVE  OPENING  SOLENOID  CIRCUITS 
DIODE  (30) 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS: 


HDW/FUNC 

3/1R 

3/1R 

3/2R 

3/1R 

3/3 

A [ 2 ] 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


B [ F ] 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 


LOCATION: 
PART  NUMBER: 


DIODE  BOARDS  56V76A207,  208  & 209 
SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  ONE  OF  THESE  DIODES  WILL  CAUSE  THE  LOSS  OF  THE 
OPEN  COMMAND.  ONE  OF  THE  PREVALVES  (PV1,  PV2  & PV3)  WILL  CLOSE 
PREMATURELY  (FAIL  TO  REMAIN  OPEN)  IF  ALL  REDUNDANCY  IS  LOST. 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-473 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/26/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5072 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  DIODE  (2  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN  (INHIBIT  OPEN  COMMAND  TO  OPENING 

SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY 


SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  PCA  4,  5 & 6 

6)  L02  PREVALVE  OPENING  SOLENOID  CIRCUITS 

7)  DIODE  (6)  (A1CR29  (3) , A1CR46(3)) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  PCA  4,  5 & 6 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  ONE  OF  THESE  DIODES  WILL  CAUSE  THE  LOSS  OF  THE 
OPEN  COMMAND.  ONE  OF  THE  PREVALVES  (PV1,  PV2  & PV3)  WILL  CLOSE 
PREMATURELY  (FAIL  TO  REMAIN  OPEN)  IF  ALL  REDUNDANCY  IS  LOST. 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-474 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/26/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5073 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  DIODE  (3  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN  (INHIBIT  OPEN  COMMAND  TO  OPENING 

SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 


1) 

EPD&C/MPS 

2) 

02 

3) 

L02  PREVALVE 

(1  PER  SSME)  (PV1,  PV2  & 

4) 

AVIONICS  BAYS  4,  5 & 6 

5) 

AFT  LCA  1,  2 

& 3 

6) 

L02  PREVALVE 

OPENING  SOLENOID  CIRCUITS 

7) 

DIODE  (9) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  ONE  OF  THESE  DIODES  WILL  CAUSE  THE  LOSS  OF  THE 
OPEN  COMMAND.  ONE  OF  THE  PREVALVES  (PV1,  PV2  & PV3)  WILL  CLOSE 
PREMATURELY  (FAIL  TO  REMAIN  OPEN)  IF  ALL  REDUNDANCY  IS  LOST. 

THE  RESULTING  SYSTEM  PRESSURE  SURGE  COULD  CAUSE  A RUPTURE  OF  THE 
UPSTREAM  FEEDLINE,  UNCONTAINED  ENGINE  DAMAGE  AND/OR 
FIRE/EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-475 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/26/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/1R 

MDAC  ID: 

5074 

ABORT: 

3/1R 

ITEM: 

DIODE  (10 

PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN  (INHIBIT  CLOSE  COMMAND  TO  CLOSING 

SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  DIODE  BOARDS  56V76A207,  208  & 209 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 

LOCATION:  DIODE  BOARDS  56V76A207,  208  & 209 

PART  NUMBER:  SEE  REFERENCES 


6) 

L02  PRE VALVE  CLOSING  SOLENOID 

CIRCUITS 

7) 

DIODE  (30) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/1R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING : 

3/3 

REDUNDANCY  SCREENS:  A[2]  B[F] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  ONE  OF  THESE  DIODES  WILL  PREVENT  THE  CLOSURE  OF 
ONE  OF  THE  PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS 
DURING  THE  MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE 
L02  PUMP  INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11. 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-476 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/26/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5075 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  DIODE  (6  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN  (INHIBIT  CLOSE  COMMAND  TO  CLOSING 

SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY 


SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  6 PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  PCA  4,  5 & 6 

6)  L02  PREVALVE  CLOSING  SOLENOID  CIRCUITS 

7)  DIODE  (18)  (A1CR20  (3) , A1CR27(3),  A1CR28(3),  A1CR37(3), 

A1CR44  ( 3 ) , A1CR45  (3) ) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  PCA  4,  5 & 6 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS /RATIONALE : 

THE  FAILURE  OF  ONE  OF  THESE  DIODES  WILL  PREVENT  THE  CLOSURE  OF 
ONE  OF  THE  PREVALVES  (PV1,  PV2  & PV3).  IF  THIS  FAILURE  OCCURS 
DURING  THE  MECO  SEQUENCE,  THERE  WILL  BE  A LOSS  OF  PRESSURE  AT  THE 
L02  PUMP  INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-477 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/26/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5076 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  DIODE  (7  PER  CIRCUIT) 

FAILURE  MODE:  FAILS  OPEN  (INHIBIT  CLOSE  COMMAND  TO  CLOSING 

SOLENOIDS) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  PREVALVE  (1  PER  SSME)  (PV1,  PV2  & PV3) 

4)  AVIONICS  BAYS  4,  5 & 6 

5)  AFT  LCA  1,  2 & 3 

6)  L02  PREVALVE  CLOSING  SOLENOID  CIRCUITS 

7)  DIODE  (21) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FAILURE  OF  ONE  OF  THESE  DIODES  WILL  PREVENT  THE  CLOSURE  OF 
ONE  OF  THE  PREVALVES  (PV1,  PV2  & PV3) . IF  THIS  FAILURE  OCCURS 
DURING  THE  MECO  SEQUENCE,  THERE  WILL  BE  A IOSS  OF  PRESSURE  AT  THE 
L02  PUMP  INLET. 

THIS  FAILURE  COULD  CAUSE  A PUMP  OVERSPEED,  UNCONTAINED  ENGINE 
DAMAGE  AND/OR  EXPLOSION.  THE  WORST  CASE  IS  THE  LOSS  OF  THE 
VEHICLE . 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEETS  10,  10.1,  11, 

11.1,  12  & 12.1 


REPORT  DATE  01/16/87 


C-478 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5120 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CONTROL  CIRCUIT 

FAILURE  MODE:  ALL  CREDIBLE  MODES:  OPENS,  SHORTS,  LOSS  OF  POWER 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  1 & 3 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CONTROL  CIRCUIT 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  TEMPERATURE,  MISHANDLING/ABUSE 

EFFECTS/RATIONALE : 

THIS  CIRCUIT  PROVIDES  POWER,  CONTROL  AND  MONITORING  FOR  THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE. 

THE  CRITICALITY  3 ITEMS  REFERENCED  ON  THIS  SHEET  INCLUDE  12 
RESISTORS  AND  5 DIODES.  THE  ITEMS  WITH  A CRITICALITY  OTHER  THAN 
3 ARE  LISTED  SEPERATELY  UNDER  MDAC  ID  5121  THROUGH  5139. 


REFERENCES:  SSWH  DWG  10.11A;  VS72 -941099  SHEET  19 


REPORT  DATE  01/16/87 


C-479 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5121 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  SHORTED  OPEN  TO  BUS  (ACTIVATE  LV24) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  PANEL  R4 

5)  L02  FEEDLINE  RELIEF  VALVE  TOGGLE  SWITCH  (S17) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7354 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  ACTIVATE  THE  HELIUM  SOLENOID  (LV24).  THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  CLOSE.  THE  LOSS  OF  ALL 
REDUNDANCY  AFTER  MECO  WILL  CAUSE  THE  RUPTURE  OF  THE  FEEDLINE 
MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE  OVERPRESSURIZED. 

THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASE  (OUTGASSING  G02 
CAN  INTERFER  WITH  SOME  PAYLOADS).  THE  VEHICLE  COULD  BE  DESTROYED 
IN  THE  DEORBIT  PHASE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-480 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5122 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  PREMATURE  OPEN-TO-BUS  (ACTIVATE  LV24) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  PANEL  R4 

5)  L02  FEEDLINE  RELIEF  VALVE  TOGGLE  SWITCH  (S17) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7354 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  ACTIVATE  THE  HELIUM  SOLENOID  (LV24) . THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  CLOSE.  THE  LOSS  OF  ALL 
REDUNDANCY  AFTER  MECO  WILL  CAUSE  THE  RUPTURE  OF  THE  FEEDLINE 
MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE  OVERPRESSURIZED. 

THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASE  (OUTGASSING  G02 
CAN  INTERFER  WITH  SOME  PAYLOADS).  THE  VEHICLE  COULD  BE  DESTROYED 
IN  THE  DEORBIT  PHASE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-481 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
3/2R 
3/1R 

ITEM:  RESISTER,  LIMIT  (1.2K) 

FAILURE  MODE:  FAILS  OPEN,  SHORTS  (INHIBIT  LV24) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/12/87 

EPD&C/MPS 

5123 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  PANEL  R4 

5)  RESISTOR,  LIMIT  (1.2  K)  (3) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 


LOCATION:  FLIGHT  STATION 

PART  NUMBER:  RWR80S1211FR 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  STRESS 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  STOP  THE  OPERATION  OF  THE  HELIUM  SOLENOID 
(LV24).  THE  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  OPEN. 
PROPELLENT  WILL  BE  VENTED  OVERBOARD  IF  ALL  REDUNDANCY  IS  LOST. 
THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-482 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5124 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (AR42) 

FAILURE  MODE:  FUSE  FAIL  OPEN  (INHIBIT  LV24) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  1 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 
CIRCUIT 

6)  HYBRID  DRIVER,  TYPE  3 (AR42) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  MID  PCA  1 

PART  NUMBER:  MC477-02 63-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  STOP  THE  OPERATION  OF  THE  HELIUM  SOLENOID 
(LV24).  THE  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  OPEN. 
PROPELLENT  WILL  BE  VENTED  OVERBOARD  IF  ALL  REDUNDANCY  IS  LOST. 
THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-483 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  EPD&C/MPS 

MDAC  ID:  5125 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (AR42) 

FAILURE  MODE:  FUSE  FAIL  ON  (ACTIVATE  LV24) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDSC/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  1 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 
CIRCUIT 

6)  HYBRID  DRIVER,  TYPE  3 (AR42) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/ NA 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ P ] 

LOCATION:  MID  PCA  1 

PART  NUMBER:  MC477-0263-0002 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  ACTIVATE  THE  HELIUM  SOLENOID  (LV24).  THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  CLOSE.  THE  LOSS  OF  ALL 
REDUNDANCY  AFTER  MECO  WILL  CAUSE  THE  RUPTURE  OF  THE  FEEDLINE 
MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE  OVERPRESSURIZED. 

THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASE  (OUTGASSING  G02 
CAN  INTERFER  WITH  SOME  PAYLOADS).  THE  VEHICLE  COULD  BE  DESTROYED 
IN  THE  DEORBIT  PHASE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-484 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5126 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (AR30) 

FAILURE  MODE:  FUSE  FAIL  OPEN  (INHIBIT  LV24) 


LEAD  ANALYST:  HOLDEN/ LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  3 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 
CIRCUIT 

6)  HYBRID  DRIVER,  TYPE  3 (AR30) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  MID  PCA  3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  STOP  THE  OPERATION  OF  THE  HELIUM  SOLENOID 
(LV24),  THE  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  OPEN. 
PROPELLENT  WILL  BE  VENTED  OVERBOARD  IF  ALL  REDUNDANCY  IS  LOST. 
THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-485 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5127 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (AR30) 

FAILURE  MODE:  FUSE  FAIL  ON  (ACTIVATE  LV24) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  3 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 
CIRCUIT 

6)  HYBRID  DRIVER,  TYPE  3 (AR30) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  MID  PCA  3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  ACTIVATE  THE  HELIUM  SOLENOID  (LV24).  THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  CLOSE.  THE  LOSS  OF  ALL 
REDUNDANCY  AFTER  MECO  WILL  CAUSE  THE  RUPTURE  OF  THE  FEEDLINE 
MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE  OVERPRESSURIZED. 

THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASE  (OUTGASSING  G02 
CAN  INTERFER  WITH  SOME  PAYLOADS).  THE  VEHICLE  COULD  BE  DESTROYED 
IN  THE  DEORBIT  PHASE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-486 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5128 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (RPC28) 

FAILURE  MODE:  FAIL  ON/CLOSED  (ACTIVATE  LV24) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  1 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 
CIRCUIT 

6)  REMOTE  POWER  CONTROLLER  (RPC28) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  MID  PCA  1 

PART  NUMBER:  MC450-0017-1030 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  ACTIVATE  THE  HELIUM  SOLENOID  (LV24).  THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  CLOSE.  THE  LOSS  OF  ALL 
REDUNDANCY  AFTER  MECO  WILL  CAUSE  THE  RUPTURE  OF  THE  FEEDLINE 
MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE  OVERPRESSURIZED. 

THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASE  (OUTGASSING  G02 
CAN  INTERFER  WITH  SOME  PAYLOADS).  THE  VEHICLE  COULD  BE  DESTROYED 
IN  THE  DEORBIT  PHASE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-487 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5129 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


REMOTE  POWER  CONTROLLER  (RPC32) 
FAIL  ON/CLOSED  (ACTIVATE  LV24) 


LEAD  ANALYST:  HOLDEN/ LOWERY 


SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  3 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 
CIRCUIT 

6)  REMOTE  POWER  CONTROLLER  (RPC32) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  MID  PCA  3 

PART  NUMBER:  MC450-0017-1030 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  ACTIVATE  THE  HELIUM  SOLENOID  (LV24).  THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  CLOSE.  THE  LOSS  OF  ALL 
REDUNDANCY  AFTER  MECO  WILL  CAUSE  THE  RUPTURE  OF  THE  FEEDLINE 
MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE  OVERPRESSURIZED. 

THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASE  (OUTGASSING  G02 
CAN  INTERFER  WITH  SOME  PAYLOADS).  THE  VEHICLE  COULD  BE  DESTROYED 
IN  THE  DEORBIT  PHASE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-488 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/15/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5130 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

2/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (RPC32) 

FAILURE  MODE:  FAIL  OPEN  (INHIBIT  LV24) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  3 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 
CIRCUIT 

6)  REMOTE  POWER  CONTROLLER  (RPC32) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  MID  PCA  3 

PART  NUMBER:  MC450-0017-1030 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  STOP  THE  OPERATION  OF  THE  HELIUM  SOLENOID 
(LV24) , THE  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  OPEN. 
PROPELLENT  WILL  BE  VENTED  OVERBOARD  IF  ALL  REDUNDANCY  IS  LOST. 
THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-489 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5131 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (RPC28) 

FAILURE  MODE:  FAIL  OPEN  (INHIBIT  LV24) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  1 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 
CIRCUIT 

6)  REMOTE  POWER  CONTROLLER  (RPC28) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


C [ P ] 


LOCATION:  MID  PCA  1 

PART  NUMBER:  MC450-0017-1030 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  STOP  THE  OPERATION  OF  THE  HELIUM  SOLENOID 
(LV24) , THE  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  OPEN. 
PROPELLENT  WILL  BE  VENTED  OVERBOARD  IF  ALL  REDUNDANCY  IS  LOST. 
THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-490 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5132 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  MDM  (FA3) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  ON  (ACTIVATE  LV24) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  AVIONICS  BAY  6 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 

CIRCUIT 

6)  MDM  (FA3)  (56V72A9) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  ACTIVATE  THE  HELIUM  SOLENOID  (LV24).  THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  CLOSE.  THE  LOSS  OF  ALL 
REDUNDANCY  AFTER  MECO  WILL  CAUSE  THE  RUPTURE  OF  THE  FEEDLINE 
MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE  OVERPRESSURIZED. 

THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASE  (OUTGASSING  G02 
CAN  INTERFER  WITH  SOME  PAYLOADS).  THE  VEHICLE  COULD  BE  DESTROYED 
IN  THE  DEORBIT  PHASE. 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-491 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/12/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/2R 

MDAC  ID: 

5133 

ABORT: 

3/1R 

ITEM: 

MDM  (FA3) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS 

OFF  (INHIBIT  LV24) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  AVIONICS  BAY  6 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 

CIRCUIT 

6)  MDM  (FA3)  (56V72A9) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A ( 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  ACTIVATE  THE  HELIUM  SOLENOID  (LV24).  THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  CLOSE.  THE  LOSS  OF  ALL 
REDUNDANCY  AFTER  MECO  WILL  CAUSE  THE  RUPTURE  OF  THE  FEEDLINE 
MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE  OVERPRESSURIZED. 

THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-492 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/12/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

2/1R 

MDAC  ID: 

5134 

ABORT: 

2/1R 

ITEM: 

MDM  (FA1) 

FAILURE  MODE:  PREMATURE/ERRONEOUS 

ON  (ACTIVATE  LV24) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  AVIONICS  BAY  4 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 

CIRCUIT 

6)  MDM  (FA1)  (54V72A7) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ p ] 

LOCATION:  AVIONICS  BAY  4 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  ACTIVATE  THE  HELIUM  SOLENOID  (LV24).  THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  CLOSE.  THE  LOSS  OF  ALL 
REDUNDANCY  AFTER  MECO  WILL  CAUSE  THE  RUPTURE  OF  THE  FEEDLINE 
MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE  OVERPRESSURIZED. 

THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASE  (OUTGASSING  G02 
CAN  INTERFER  WITH  SOME  PAYLOADS).  THE  VEHICLE  COULD  BE  DESTROYED 
IN  THE  DEORBIT  PHASE. 


REFERENCES:  SSWH  DWG  10.I1A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-493 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/12/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/2R 

MDAC  ID: 

5135 

ABORT: 

3/1R 

ITEM: 

MDM  (FA1) 

FAILURE  MODE:  PREMATURE/ERRONEOUS 

OFF  (INHIBIT  LV24) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  AVIONICS  BAY  4 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 

CIRCUIT 

6)  MDM  (FA1)  (54V72A7) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ P ] 

LOCATION:  AVIONICS  BAY  4 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  STOP  THE  OPERATION  OF  THE  HELIUM  SOLENOID 
(LV24).  THE  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  OPEN. 
PROPELLENT  WILL  BE  VENTED  OVERBOARD  IF  ALL  REDUNDANCY  IS  LOST. 
THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-494 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/12/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

2/1R 

MDAC  ID: 

5136 

ABORT: 

2/1R 

ITEM: 

MDM  (FA2) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS 

ON  (ACTIVATE  LV24) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  AVIONICS  BAY  5 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 

CIRCUIT 

6)  MDM  (FA2)  (55V72A8) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  ACTIVATE  THE  HELIUM  SOLENOID  (LV24).  THE  L02 
FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  CLOSE.  THE  LOSS  OF  ALL 
REDUNDANCY  AFTER  MECO  WILL  CAUSE  THE  RUPTURE  OF  THE  FEEDLINE 
MANIFOLD.  THE  AFT  FUSELAGE  WILL  BE  OVERPRESSURIZED. 

THE  MISSION  IS  LOST  IN  THE  ONORBIT  MISSION  PHASE  (OUTGASSING  G02 
CAN  INTERFER  WITH  SOME  PAYLOADS).  THE  VEHICLE  COULD  BE  DESTROYED 
IN  THE  DEORBIT  PHASE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-495 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/12/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/2R 

MDAC  ID: 

5137 

ABORT: 

3/1R 

ITEM: 

MDM  (FA2) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS 

OFF  (INHIBIT  LV24) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  AVIONICS  BAY  5 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 

CIRCUIT 

6)  MDM  (FA2)  (55V72A8) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  STOP  THE  OPERATION  OF  THE  HELIUM  SOLENOID 
(LV24) . THE  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  OPEN. 
PROPELLENT  WILL  BE  VENTED  OVERBOARD  IF  ALL  REDUNDANCY  IS  LOST. 
THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-496 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5138 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  DIODE,  ISOLATION  (1A,  12 A) 

FAILURE  MODE:  FAIL  OPEN  (INHIBIT  LV24) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  1 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 
CIRCUIT 

6)  DIODE,  ISOLATION  (1A,  12A)  (4)  (A2CR8,  A5CR1,  A5CR2,  A5CR4) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  MID  PCA  1 

PART  NUMBER:  JANTXVIN4246,  JANT1N1204RA 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  STOP  THE  OPERATION  OF  THE  HELIUM  SOLENOID 
(LV24).  THE  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  OPEN. 
PROPELLENT  WILL  BE  VENTED  OVERBOARD  IF  ALL  REDUNDANCY  IS  LOST. 
THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-497 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5139 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  DIODE,  ISOLATION  (1A,  12A) 

FAILURE  MODE:  FAIL  OPEN/SHORT  (INHIBIT  LV24) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7) 

4)  MID  PCA  3 

5)  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  CLOSING  SOLENOID  (LV24) 
CIRCUIT 

6)  DIODE,  ISOLATION  (1A,  12A)  (6)  (A1CR32,  A1CR36,  A1CR37, 

A1CR39,  A4CR3,  A4CR4) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  MID  PCA  3 

PART  NUMBER:  JANTXVIN4246,  JANT1N1204RA 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  STOP  THE  OPERATION  OF  THE  HELIUM  SOLENOID 
(LV24) . THE  L02  FEEDLINE  RELIEF  SHUTOFF  VALVE  (PV7)  WILL  OPEN. 
PROPELLENT  WILL  BE  VENTED  OVERBOARD  IF  ALL  REDUNDANCY  IS  LOST. 
THE  MISSION  WILL  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  19 


REPORT  DATE  01/16/87 


C-498 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  2/2 

MDAC  ID:  5141  ABORT:  1/1 

ITEM:  L02  PROPELLENT  DUMP  SEQUENCE  TOGGLE  SWITCH 

FAILURE  MODE:  SHORTS  (PREMATURE  DUMP  START) 

LEAD  ANALYST:  HOLDEN/ LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  PANEL  R2 

4)  L02  PROPELLENT  DUMP  SEQUENCE  TOGGLE  SWITCH  (SI) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7203 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  MPS  DUMP  COMMAND.  IF  THIS 
COMMAND  IS  EXECUTED,  PROPELLENT  WILL  BE  LOST  OVERBOARD.  THE 
WORST  CASE  IS  THE  VEHICLE  WILL  NOT  REACH  ORBIT. 

THE  MISSION  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 
THE  VEHICLE  MAY  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A 


REPORT  DATE  01/16/87 


C-499 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  2/1R 

MDAC  ID:  5142  ABORT:  2/1R 

ITEM:  L02  PROPELLENT  DUMP  SEQUENCE  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  OPEN  (DUMP  IS  NOT  STARTED) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  PANEL  R2 

4)  L02  PROPELLENT  DUMP  SEQUENCE  TOGGLE  SWITCH  (SI) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7203 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THE  FAILURE  OF  THE  MPS  DUMP  WILL  LEAVE  L02  TRAPPED  IN  THE  LINES 
AND  IN  THE  SSMES.  THE  OUTGASSING  OF  02  DURING  THE  ONORBIT 
MISSION  PHASE  COULD  INTERFER  WITH  SOME  PAYLOADS.  THE  WEIGHT  OF 
THIS  TRAPPED  L02  WILL  MOVE  THE  VEHICLE  CG  PAST  THE  AFT  CG  LIMIT. 
THE  WORST  CASE  IS  THE  LOSS  OF  ALL  REDUNDANCY  WILL  CAUSE  THE  LOSS 
OF  THE  VEHICLE  DURING  THE  DEORBIT  MISSION  PHASE. 


REFERENCES:  SSWH  DWG  10.11A 


REPORT  DATE  01/16/87 


C-500 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  2/1R 

MDAC  ID:  5143  ABORT:  2/1R 


ITEM 

: FUSE 

(F31,  F32) 

FAILURE  MODE:  FAIL 

OPEN  (DUMP  IS 

NOT  STARTED) 

LEAD 

ANALYST:  HOLDEN/ LOWERY 

SUBSYS  LEAD:  A. 

. J.  MARINO 

BREAKDOWN  HIERARCHY: 

» 

i 

1) 

EPD&C/MPS 

2) 

02 

3) 

PANEL  R2 

4) 

L02  PROPELLENT 

DUMP  SEQUENCE 

TOGGLE  SWITCH 

(SI) 

5) 

FUSE  (2)  (F31, 

F32) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/2R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS 

: A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  MC451-0018-0100 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE: 

THE  FAILURE  OF  THE  MPS  DUMP  WILL  LEAVE  L02  TRAPPED  IN  THE  LINES 
AND  IN  THE  SSMES.  THE  OUTGASSING  OF  02  DURING  THE  ONORBIT 
MISSION  PHASE  COULD  INTERFER  WITH  SOME  PAYLOADS.  THE  WEIGHT  OF 
THIS  TRAPPED  L02  WILL  MOVE  THE  VEHICLE  CG  PAST  THE  AFT  CG  LIMIT. 
THE  WORST  CASE  IS  THE  LOSS  OF  ALL  REDUNDANCY  WILL  CAUSE  THE  LOSS 
OF  THE  VEHICLE  DURING  THE  DEORBIT  MISSION  PHASE. 


REFERENCES:  SSWH  DWG  10.11A 


REPORT  DATE  01/16/87 


C-501 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5160 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  OUTBOARD  FILL  & DRAIN  VALVE  CONTROL  CIRCUIT 

FAILURE  MODE:  ALL  CREDIBLE  MODES:  OPENS,  SHORTS,  LOSS  OF  POWER 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  L02  OUTBOARD  FILL  & DRAIN  VALVE  CONTROL  CIRCUIT 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  TEMPERATURE,  MISHANDLING/ABUSE 

EFFECTS/RATIONALE : 

THIS  CIRCUIT  PROVIDES  POWER,  CONTROL  AND  MONITORING  FOR  THE 
OUTBOARD  FILL  AND  DRAIN  VALVE. 

THE  CRITICALITY  3 ITEMS  REFERENCED  ON  THIS  SHEET  INCLUDE  8 
RESISTORS  AND  3 DIODES.  THE  ITEMS  WITH  A CRITICALITY  OTHER  THAN 
3 ARE  LISTED  SEPERATELY  UNDER  MDAC  ID  5161  THROUGH  5176. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-502 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/24/86 

EPDfiC/MPS 

5161 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  L02  OUTBOARD  FILL  & DRAIN  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  SHORTED  OPEN-TO-BUS 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  PANEL  R4 

7)  L02  OUTBOARD  FILL  & DRAIN  VALVE  TOGGLE  SWITCH  (S6) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7153 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 

DRAIN  VALVE  (PV9)  WILL  OPEN.  L02  WILL  BE  VENTED  OVERBOARD. 

THE  MISSION  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 

THE  VEHICLE  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-503 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/24/86 

EPD&C/MPS 

5162 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/1R 


ITEM:  L02  OUTBOARD  FILL  & DRAIN  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  PREMATURE  OPEN-TO-BUS 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  PANEL  R4 

7)  L02  OUTBOARD  FILL  & DRAIN  VALVE  TOGGLE  SWITCH  (S6) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7153 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 

DRAIN  VALVE  (PV9)  WILL  OPEN.  L02  WILL  BE  VENTED  OVERBOARD. 

THE  MISSION  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 

THE  VEHICLE  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES: 


SSWH  DWG  10.11A; 


VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-504 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/26/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/1R 

MDAC  ID: 

5163 

ABORT: 

3/3 

ITEM: 

L02  OUTBOARD  FILL  & DRAIN  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  OPEN 

(PREMATURE  DEACTIVATE  LV28) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  PANEL  R4 

7)  L02  OUTBOARD  FILL  & DRAIN  VALVE  TOGGLE  SWITCH  (S6) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7153 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  DISABLE  THE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 
DRAIN  VALVE  (PV9)  WILL  CLOSE.  IF  THIS  FAILURE  OCCURS  DURING  FAST 
FILL,  THERE  WILL  BE  A SUDDEN  PRESSURE  SPIKE  IN  THE  LINE. 

THE  WORST  CASE  IS  A RUPTURE  OF  THE  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-505 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/26/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5164 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/3 


ITEM:  L02  OUTBOARD  FILL  & DRAIN  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  SHORTED/ PREMATURE  (FALSE  ACTIVATION  OF  LV29) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  PANEL  R4 

7)  L02  OUTBOARD  FILL  & DRAIN  VALVE  TOGGLE  SWITCH  (S6) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME4 52 -0102 -7 153 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A FALSE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV29).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 
DRAIN  VALVE  (PV9)  WILL  CLOSE.  IF  THIS  FAILURE  OCCURS  DURING  FAST 
FILL,  THERE  WILL  BE  A SUDDEN  PRESSURE  SPIKE  IN  THE  LINE. 

THE  WORST  CASE  IS  A RUPTURE  OF  THE  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-506 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/26/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5165 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  3/3 


ITEM:  FUSE 

FAILURE  MODE:  FAIL  OPEN  (PREMATURE  DEACTIVATE  LV28) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  PANEL  R4 

7)  FUSE  (1A)  (F8) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME451-0018-0100 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  DISABLE  THE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 
DRAIN  VALVE  (PV9)  WILL  CLOSE.  IF  THIS  FAILURE  OCCURS  DURING  FAST 
FILL,  THERE  WILL  BE  A SUDDEN  PRESSURE  SPIKE  IN  THE  LINE. 

THE  WORST  CASE  IS  A RUPTURE  OF  THE  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-507 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/24/86 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5166 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FAIL  ON  THE  OPEN  COMMAND 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  L02  OUTBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV28) 
CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (56V76A123) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  3 

PART  NUMBER:  MC477-0263-0002 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 

DRAIN  VALVE  (PV9)  WILL  OPEN.  L02  WILL  BE  VENTED  OVERBOARD. 

THE  MISSION  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 

THE  VEHICLE  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-508 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/24/86  HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/2R 

MDAC  ID: 

5167 

ABORT: 

2/1R 

ITEM: 

HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FAIL  PREMATURE/ ERRONEOUS  OPEN 

COMMAND 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  L02  OUTBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV28) 
CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (56V76A123) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 

DRAIN  VALVE  (PV9)  WILL  OPEN.  L02  WILL  BE  VENTED  OVERBOARD. 

THE  MISSION  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 

THE  VEHICLE  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-509 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/26/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5168 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  3/3 


FMLTOE  MODE:  ^IL^F^ (PKEMATTOE  DEACTIVATION  LV28) 

lead  ANALYST:  HOLDEN/LOWERY  SOBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 
02 

L02  outboard  fill 

AVIONICS  BAY  6 
AFT  LCA  3 
L02  OUTBOARD  FILL 
CTPCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (56V76A123) 

8) 

9) 


2) 

3) 

4) 

5) 

6) 


& DRAIN  VALVE  (PV9) 

& DRAIN  VALVE  OPENING  SOLENOID  (LV28) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


HDW/FUNC 

2/1R 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] 


ABORT 
RTLS: 
TAL: 
AOA: 
ATO: 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION: 
PART  NUMBER: 


AFT  LCA  3 

MC4 77-02 63 -0002 


CAUSES*  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 
SHOCK, ’VIBRATION,  THERMAL  SHOCK 

EYRE^  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES: 


SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-510 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/26/87 

EPD&C/MPS 

5169 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

3/3 


ITEM: 

FAILURE  MODE: 


HYBRID  DRIVER,  TYPE  3 
FAIL  ON  (PREMATURE  ACTIVATION  OF  LV29) 

LEAD  ANALYST:  HOLDEN/LOWERY 


SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 
1)  EPD&C/MPS 
02 


2) 

3) 

4) 

5) 

6) 


L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 
AVIONICS  BAY  6 1 J 
AFT  LCA  3 


CIRCUIT 


L02  OUTBOARD  FILL  & DRAIN  VALVE  CLOSING  SOLENOID  (LV29) 


7)  HYBRID  DRIVER,  TYPE  3 (56V76A209) 

9) 

FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

CRITICALITIES 

hdw/func 

2/1R 

3/3 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

hdw/func 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 
PART  NUMBER: 


AFT  LCA  3 

MC4 7 7 -02 63 -0002 


SESf : C0HTAMINATI0H'  "ECH 

EFFECTS/RATIONALE : 

WILL  GIVE  A FALSE  CLOSE  COMMAND  TO  THE  cr/5«5TMr 


REFERENCES: 


SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-511 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/26/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5170 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/3 


ITEM:  DIODE,  ISOLATION 

FAILURE  MODE:  FAIL  OFF  (PREMATURE  DEACTIVATION  LV28) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  L02  OUTBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV28) 
CIRCUIT 

7)  DIODE  (2) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  3 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  DISABLE  THE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 
DRAIN  VALVE  (PV9)  WILL  CLOSE.  IF  THIS  FAILURE  OCCURS  DURING  FAST 
FILL,  THERE  WILL  BE  A SUDDEN  PRESSURE  SPIKE  IN  THE  LINE. 

THE  WORST  CASE  IS  A RUPTURE  OF  THE  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-512 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/26/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/1R 

MDAC  ID: 

5171 

ABORT: 

3/3 

ITEM: 

DIODE,  ISOLATION 

FAILURE  MODE:  FAIL  OFF  (PREMATURE 

DEACTIVATION  LV  2 8 ) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  DIODE  BOARD  55V76A209 

6)  L02  OUTBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV28) 
CIRCUIT 

7)  DIODE  (3A)  (2)  (CR17,  CR18) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  DIODE  BOARD  55V76A209 

PART  NUMBER:  JANTXV1N5551 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  DISABLE  THE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 
DRAIN  VALVE  (PV9)  WILL  CLOSE.  IF  THIS  FAILURE  OCCURS  DURING  FAST 
FILL,  THERE  WILL  BE  A SUDDEN  PRESSURE  SPIKE  IN  THE  LINE. 

THE  WORST  CASE  IS  A RUPTURE  OF  THE  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-513 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/24/86 

EPD&C/MPS 

5172 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

2/1R 


ITEM:  MDM  (FA4) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  ON  COMMAND 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  L02  OUTBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV28) 
CIRCUIT 

6)  MDM  (FA4)  (56V72A10) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 

DRAIN  VALVE  (PV9)  WILL  OPEN.  L02  WILL  BE  VENTED  OVERBOARD. 

THE  MISSION  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 

THE  VEHICLE  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-514 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/26/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/1R 

MDAC  ID: 

5173 

ABORT: 

3/3 

ITEM: 

MDM  (FA4) 

FAILURE  MODE:  FAIL  OFF 

(PREMATURE  DEACTIVATION  LV28) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE 

4)  AVIONICS  BAY  6 

5)  L02  OUTBOARD  FILL  & DRAIN  VALVE 

CIRCUIT 

6)  MDM  (FA4)  (56V72A10) 

7) 

8) 

9) 


(PV9) 

OPENING  SOLENOID  (LV28) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/1R 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


C [ P ] 


LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  DISABLE  THE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 
DRAIN  VALVE  (PV9)  WILL  CLOSE.  IF  THIS  FAILURE  OCCURS  DURING  FAST 
FILL,  THERE  WILL  BE  A SUDDEN  PRESSURE  SPIKE  IN  THE  LINE. 

THE  WORST  CASE  IS  A RUPTURE  OF  THE  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-515 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/26/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5174 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/3 


ITEM:  MDM  (FA4) 

FAILURE  MODE:  FAIL  ON  (PREMATURE  ACTIVATE  LV29) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  L02  OUTBOARD  FILL  & DRAIN  VALVE  CLOSING  SOLENOID  (LV29) 
CIRCUIT 

6)  MDM  (FA4)  (56V72A10) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/1R 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A FALSE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV29).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 
DRAIN  VALVE  (PV9)  WILL  CLOSE.  IF  THIS  FAILURE  OCCURS  DURING  FAST 
FILL,  THERE  WILL  BE  A SUDDEN  PRESSURE  SPIKE  IN  THE  LINE. 

THE  WORST  CASE  IS  A RUPTURE  OF  THE  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-516 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/26/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/1R 

MDAC  ID: 

5175 

ABORT: 

3/3 

ITEM: 

MDM  (LAI) 

FAILURE  MODE:  FAIL  OFF  (PREMATURE 

DEACTIVATION  LV28) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  L02  OUTBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV28) 
CIRCUIT 


6) 

MDM  (LAI)  (56V72A33) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  DISABLE  THE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 
DRAIN  VALVE  (PV9)  WILL  CLOSE.  IF  THIS  FAILURE  OCCURS  DURING  FAST 
FILL,  THERE  WILL  BE  A SUDDEN  PRESSURE  SPIKE  IN  THE  LINE. 

THE  WORST  CASE  IS  A RUPTURE  OF  THE  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-517 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/26/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  3/2R 

MDAC  ID:  5176  ABORT:  3/1R 

ITEM:  MDM  (LAI) 

FAILURE  MODE:  FAIL  ON  (PREMATURE  ACTIVATE  LV28) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OUTBOARD  FILL  & DRAIN  VALVE  (PV9) 

4)  AVIONICS  BAY  6 

5)  L02  OUTBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV28) 
CIRCUIT 

6)  MDM  (LAI)  (56V72A33) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV28).  IF  ALL  REDUNDANCY  IS  LOST,  THE  OUTBOARD  FILL  & 

DRAIN  VALVE  (PV9)  WILL  OPEN.  L02  WILL  BE  VENTED  OVERBOARD. 

THE  MISSION  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  ASCENT. 

THE  VEHICLE  COULD  BE  LOST  IF  THIS  FAILURE  OCCURS  DURING  AN  ABORT. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  15 


REPORT  DATE  01/16/87 


C-518 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5500 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  INBOARD  FILL  & DRAIN  VALVE  CONTROL  CIRCUIT 

FAILURE  MODE:  ALL  CREDIBLE  MODES:  OPENS,  SHORTS,  LOSS  OF  POWER 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  L02  INBOARD  FILL  & DRAIN  VALVE  CONTROL  CIRCUIT 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  TEMPERATURE,  MISHANDLING/ABUSE 

EFFECTS/RATIONALE : 

THIS  CIRCUIT  PROVIDES  POWER,  CONTROL  AND  MONITORING  FOR  THE  L02 
INBOARD  FILL  & DRAIN  VALVE. 

THE  CRITICALITY  3 ITEMS  REFERENCED  ON  THIS  SHEET  INCLUDE  8 
RESISTORS  AND  4 DIODES.  THE  ITEMS  WITH  A CRITICALITY  OTHER  THAN 
3 ARE  LISTED  SEPERATELY  UNDER  MDAC  ID  5501  THROUGH  5533. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-519 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/06/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5501 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  L02  INBOARD  FILL  & DRAIN  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  SHORTED  OPEN-TO-BUS 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  PANEL  R4 

7)  L02  INBOARD  FILL  & DRAIN  VALVE  TOGGLE  SWITCH  (S7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7257 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV30).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-520 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5502 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  L02  INBOARD  FILL  & DRAIN  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  PREMATURE  OPEN-TO-BUS 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDSC/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  PANEL  R4 

7)  L02  INBOARD  FILL  & DRAIN  VALVE  TOGGLE  SWITCH  (S7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7257 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV30).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-521 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5503 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/3 


ITEM:  L02  INBOARD  FILL  & DRAIN  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  PREMATURE  OFF  (INHIBIT  LV30) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPD&C/MPS 

2) 

02 

3) 

L02  INBOARD  FILL  & 

DRAIN 

VALVE 

(PV10) 

4) 

AVIONICS  BAY  5 

5) 

AFT  LCA  2 

6) 

PANEL  R4 

7) 

L02  INBOARD  FILL  & 

DRAIN 

VALVE 

TOGGLE  SWITCH  (S7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7257 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  OPENING  SOLENOID  (LV30)  OPEN 
COMMAND.  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  CLOSE  IF  ALL 
REDUNDANCY  IS  LOST.  IF  THIS  FAILURE  OCCURS  DURING  FAST  FILL, 
THERE  WILL  BE  A PRESSURE  SPIKE  IN  THE  LINES. 

THE  WORST  CASE  IS  THE  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-522 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5504 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/3 


ITEM:  L02  INBOARD  FILL  & DRAIN  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  ON  (PREMATURE/ERRONEOUS  ACTIVATE  LV31) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  PANEL  R4 

7)  L02  INBOARD  FILL  & DRAIN  VALVE  TOGGLE  SWITCH  (S7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7257 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV31).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL 
CLOSE  IF  ALL  REDUNDANCY  IS  LOST.  IF  THIS  FAILURE  OCCURS  DURING 
FAST  FILL,  THERE  WILL  BE  A PRESSURE  SPIKE  IN  THE  LINES. 

THE  WORST  CASE  IS  THE  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-523 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/28/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/1R 

MDAC  ID: 

5505 

ABORT: 

3/1R 

ITEM: 

L02  INBOARD  FILL  & DRAIN  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  OPEN/ PREMATURE 

OFF  (INHIBIT  LV31) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  PANEL  R4 

7)  L02  INBOARD  FILL  & DRAIN  VALVE  TOGGLE  SWITCH  (S7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7257 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV31).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-524 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5506 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  3/3 


ITEM:  FUSE  (2)  (1A) 

FAILURE  MODE:  FAIL  PREMATURE  OFF  (INHIBIT  LV30) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPD&C/MPS 

2) 

02 

3) 

L02  INBOARD  FILL  & 

DRAIN  VALVE  (PV10) 

4) 

AVIONICS  BAY  5 

5) 

AFT  LCA  2 

6) 

PANEL  R4 

7) 

8) 

FUSE  (2)  (1A)  (F9 , 

F10) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  E451-0018-0100 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  OPENING  SOLENOID  (LV30)  OPEN 
COMMAND.  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  CLOSE  IF  ALL 
REDUNDANCY  IS  LOST.  IF  THIS  FAILURE  OCCURS  DURING  FAST  FILL, 
THERE  WILL  BE  A PRESSURE  SPIKE  IN  THE  LINES. 

THE  WORST  CASE  IS  THE  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-525 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/28/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

2/1R 

MDAC  ID: 

5507 

ABORT: 

2/1R 

ITEM: 

FUSE  (1A) 

FAILURE  MODE:  FAIL  OPEN/PREMATURE 

OFF  (INHIBIT  LV31) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  PANEL  R4 

7)  FUSE  (1A)  (F10) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  E451-0018-0100 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV31).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-526 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
2/1R 
2/1R 

ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FAIL  ON  THE  OPEN  COMMAND 


DATE: 

1/06/87 

HIGHEST  CRITICALITY 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

MDAC  ID: 

5511 

ABORT: 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  L02  INBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV30) 
CIRCUIT 


7) 

HYBRID  DRIVER,  TYPE  3 (2) 

(56V76A122AR(2) ) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/2 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B ( P ] 

C [ P ] 

LOCATION:  AFT  LCA  2 

PART  NUMBER:  MC477-02 63-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV30).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87  C-527 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/06/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5512 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FAIL  PREMATURE/ ERRONEOUS  ON  THE  OPEN  COMMAND 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  L02  INBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV30) 
CIRCUIT 


7) 

HYBRID  DRIVER,  TYPE  3 (2) 

(56V76A122AR(2) ) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A ( 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  2 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV30).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-528 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5513 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  3/3 


ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FAIL  PREMATURE  OFF  (INHIBIT  LV30) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  L02  INBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV30) 
CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (2)  (56V76A122AR(2) ) 

a) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  2 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  OPENING  SOLENOID  (LV30)  OPEN 
COMMAND.  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  CLOSE  IF  ALL 
REDUNDANCY  IS  LOST.  IF  THIS  FAILURE  OCCURS  DURING  FAST  FILL, 
THERE  WILL  BE  A PRESSURE  SPIKE  IN  THE  LINES. 

THE  WORST  CASE  IS  THE  RUPTURE  OF  ORBITER  AND/OR  GSE  LINES.  THE 
RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND  FIRE  HAZARD 
IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-529 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/28/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

2/1R 

MDAC  ID: 

5514 

ABORT: 

2/1R 

ITEM: 

HYBRID  DRIVER,  TYPE 

3 

FAILURE  MODE:  FAIL  OPEN/ PREMATURE 

OFF  (INHIBIT  LV31) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  L02  INBOARD  FILL  & DRAIN  VALVE  CLOSING  SOLENOID  (LV31) 
CIRCUIT 


7) 

HYBRID  DRIVER,  TYPE  3 (56V76A122AR) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B ( p ] 

c [ p ] 

LOCATION:  AFT  LCA  2 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV31).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-530 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE!  1/28/87 
SUBSYSTEM!  EPD&C/MPS 
MDAC  ID:  5515 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

3/3 


ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FAIL  ON  (PREMATURE/ERRONEOUS  ACTIVATE  LV31) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  L02  INBOARD  FILL  & DRAIN  VALVE  CLOSING  SOLENOID  (LV31) 
CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (56V76A122AR) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  2 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV31).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL 
CLOSE  IF  ALL  REDUNDANCY  IS  LOST.  IF  THIS  FAILURE  OCCURS  DURING 
FAST  FILL,  THERE  WILL  BE  A PRESSURE  SPIKE  IN  THE  LINES. 

THE  WORST  CASE  IS  THE  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-531 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/86 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5521 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  MDM  (FA1) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  OPEN  COMMAND 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  4 

5)  L02  INBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV30) 
CIRCUIT 

6)  MDM  (FA1)  (54V72A7) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  4 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV30).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-532 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/1R 
3/1R 

ITEM:  MDM  (FA4) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  OPEN  COMMAND 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/06/87 

EPD&C/MPS 

5522 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  HOLDEN/ LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  6 

5)  L02  INBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV30) 
CIRCUIT 

6)  MDM  (FA4)  (56V72A10) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  OPEN  COMMAND  TO  THE  OPENING 
SOLENOID  (LV30).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-533 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5523 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/3 


ITEM:  MDM  (LAI) 

FAILURE  MODE:  FAIL  PREMATURE  OFF  (INHIBIT  LV30) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  6 

5)  L02  INBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV30) 
CIRCUIT 

6)  MDM  (LAI)  (56V72A33) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  OPENING  SOLENOID  (LV30)  OPEN 
COMMAND.  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  CLOSE  IF  ALL 
REDUNDANCY  IS  LOST.  IF  THIS  FAILURE  OCCURS  DURING  FAST  FILL, 
THERE  WILL  BE  A PRESSURE  SPIKE  IN  THE  LINES. 

THE  WORST  CASE  IS  THE  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-534 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5524 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/3 


ITEM:  MDM  (FA1) 

FAILURE  MODE:  FAIL  PREMATURE  OFF  (INHIBIT  LV30) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  4 

5)  L02  INBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV30) 
CIRCUIT 

6)  MDM  (FA1)  (54V72A7) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  4 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  OPENING  SOLENOID  (LV30)  OPEN 
COMMAND.  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  CLOSE  IF  ALL 
REDUNDANCY  IS  LOST.  IF  THIS  FAILURE  OCCURS  DURING  FAST  FILL, 
THERE  WILL  BE  A PRESSURE  SPIKE  IN  THE  LINES. 

THE  WORST  CASE  IS  THE  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-535 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5525 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/3 


ITEM:  MDM  (FA2) 

FAILURE  MODE:  FAIL  ON  (PREMATURE/ERRONEOUS  ACTIVATE  LV31) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  L02  INBOARD  FILL  & DRAIN  VALVE  CLOSING  SOLENOID  (LV31) 
CIRCUIT 

6)  MDM  (FA2)  (55V72A8) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ P ] 

LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  GIVE  A PREMATURE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV31).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL 
CLOSE  IF  ALL  REDUNDANCY  IS  LOST.  IF  THIS  FAILURE  OCCURS  DURING 
FAST  FILL,  THERE  WILL  BE  A PRESSURE  SPIKE  IN  THE  LINES. 

THE  WORST  CASE  IS  THE  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-536 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/28/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/1R 

MDAC  ID: 

5526 

ABORT: 

3/1R 

ITEM: 

MDM  (FA2) 

FAILURE  MODE:  FAIL  OPEN/ PREMATURE 

OFF  (INHIBIT  LV31) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  L02  INBOARD  FILL  & DRAIN  VALVE  CLOSING  SOLENOID  (LV31) 
CIRCUIT 


6) 

MDM  (FA2)  (55V72A8) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ) 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  CLOSE  COMMAND  OF  THE  CLOSING 
SOLENOID  (LV31).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-537 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5531 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/3 


ITEM:  DIODE  (2) 

FAILURE  MODE:  FAIL  PREMATURE  OFF  (INHIBIT  LV30) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  DIODE  BOARD  55V76A208 

6)  L02  INBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV30) 
CIRCUIT 

7)  DIODES  (2)  (CR13,  CR20) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  DIODE  BOARD  55V76A208 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  OPENING  SOLENOID  (LV30)  OPEN 
COMMAND.  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  CLOSE  IF  ALL 
REDUNDANCY  IS  LOST.  IF  THIS  FAILURE  OCCURS  DURING  FAST  FILL, 
THERE  WILL  BE  A PRESSURE  SPIKE  IN  THE  LINES. 

THE  WORST  CASE  IS  THE  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-538 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5532 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/3 


ITEM:  DIODE  (3A)  (4) 

FAILURE  MODE:  FAIL  PREMATURE  OFF  (INHIBIT  LV30) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  L02  INBOARD  FILL  & DRAIN  VALVE  OPENING  SOLENOID  (LV30) 
CIRCUIT 

7)  DIODES  (3A)  (4) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AFT  LCA  2 

PART  NUMBER:  JANTXIN5551 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  OPENING  SOLENOID  (LV30)  OPEN 
COMMAND.  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  CLOSE  IF  ALL 
REDUNDANCY  IS  LOST.  IF  THIS  FAILURE  OCCURS  DURING  FAST  FILL, 
THERE  WILL  BE  A PRESSURE  SPIKE  IN  THE  LINES. 

THE  WORST  CASE  IS  THE  RUPTURE  OF  ORBITER  AND/OR  GSE  FACILITY 
LINES.  THE  RESULTS  COULD  BE  AFT  FUSELAGE  OVERPRESSURIZATION  AND 
FIRE  HAZARD  IN  THE  ORBITER  AND  ON  THE  PAD. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-539 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/28/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/1R 

MDAC  ID: 

5533 

ABORT: 

3/1R 

ITEM: 

DIODES  (2)  (3A) 

FAILURE  MODE:  FAIL  OPEN/ PREMATURE  OFF 

(INHIBIT  LV31) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  INBOARD  FILL  & DRAIN  VALVE  (PV10) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  L02  INBOARD  FILL  & DRAIN  VALVE  CLOSING  SOLENOID  (LV31) 
CIRCUIT 

7)  DIODES  (2)  (3A) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE  LAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  2 

PART  NUMBER:  JANTXIN5551 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV31).  THE  INBOARD  FILL  & DRAIN  VALVE  (PV10)  WILL  OPEN 
IF  ALL  REDUNDANCY  IS  LOST. 

GAS  TRAPPED  IN  THE  LINE  WOULD  ENTER  THE  FEEDLINES  RESULTING  IN 
POTENTIAL  CAVITATION  OF  PUMPS  ON  ONE  OR  MORE  SSMES.  THE  POSSIBLE 
RESULTS  INCLUDE  MULTIPLE  SSME  SHUTDOWN,  PUMP  DAMAGE,  FIRE  AND 
EXPLOSION  (LOSS  OF  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  17 


REPORT  DATE  01/16/87 


C-540 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5550 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  OVERBOARD  BLEED  VALVE  CONTROL  CIRCUIT 

FAILURE  MODE:  ALL  CREDIBLE  MODES:  OPENS,  SHORTS,  LOSS  OF  POWER 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 


1) 

EPD&C/MPS 

2) 

02 

3) 

L02  OVERBOARD  BLEED 

VALVE 

(PV19) 

4) 

AVIONICS  BAY  5 & 6 

5) 

AFT  PCA  2 & 3 

6) 

AFT  LCA  2 

7) 

L02  OVERBOARD  BLEED 

VALVE 

CONTROL  CIRCUIT 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  TEMPERATURE,  MISHANDLING/ABUSE 

EFFECTS/RATIONALE : 

THIS  CIRCUIT  PROVIDES  POWER,  CONTROL  AND  MONITORING  FOR  THE  L02 
OVERBOARD  BLEED  VALVE. 

THE  CRITICALITY  3 ITEMS  REFERENCED  ON  THIS  SHEET  INCLUDE  6 
RESISTORS.  THE  ITEMS  WITH  A CRITICALITY  OTHER  THAN  3 ARE  LISTED 
SEPERATELY  UNDER  MDAC  ID  5551  THROUGH  5561. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-541 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5551 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FUSE  FAIL  OPEN  (INHIBIT  LV76) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (55V76A122AR) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  2 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  L02  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAIUJRE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


~1 


REPORT  DATE  01/16/87 


C-542 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATES  1/14/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  IDS  5552 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FUSE  FAIL  OPEN  (INHIBIT  LV76) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDSC/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (56V76A123AR) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  L02  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-543 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5553 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  1 

FAILURE  MODE:  FUSE  FAIL  OPEN  (INHIBIT  LV76) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (56V76A123AR) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  3 

PART  NUMBER:  MC477-0261-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  L02  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-544 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5554 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (RPC24) 

FAILURE  MODE:  FAIL  OPEN  (INHIBIT  LV76) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  5 

5)  AFT  PC  A 2 

6)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (RPC24) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  PCA  2 

PART  NUMBER:  ME450-0017-1030 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  LQ2  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-545 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5555 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (RPC23) 

FAILURE  MODE:  FAIL  OPEN  (INHIBIT  LV76) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  6 

5)  AFT  PC  A 3 

6)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (RPC23) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  PCA  3 

PART  NUMBER:  ME450-0017-1030 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  L02  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-546 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  2/1R 

MDAC  ID:  5556  ABORT:  2/1R 

ITEM:  MDM  (FA2) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  OFF  (INHIBIT  LV76) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  5 

5)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

6)  MDM  (FA2)  (55V72A8) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  L02  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-547 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/14/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

2/1R 

MDAC  ID: 

5557 

ABORT: 

2/1R 

ITEM: 

MDM  (FA3) 

FAILURE  MODE:  PREMATURE/ERRONEOUS 

OFF  (INHIBIT  LV76) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  6 

5)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

6)  MDM  (FA3)  (56V72A9) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  L02  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-548 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/14/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

2/1R 

MDAC  ID: 

5558 

ABORT: 

2/1R 

ITEM: 

MDM  (FA4) 

FAILURE  MODE:  PREMATURE/ERRONEOUS 

OFF  (INHIBIT  LV76) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  6 

5)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

6)  MDM  (FA4)  (56V72A10) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B ( P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  L02  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-549 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5559 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  DIODE  (12A) 

FAILURE  MODE:  FAIL  OPEN/SHORT  (INHIBIT  LV76) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  5 

5)  AFT  PVA  2 

6)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

7)  DIODE  (12A)  (2)  (A3CR14,  A3CR15) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS:  A [NA  ] 

LOCATION:  AFT  PCA  2 

PART  NUMBER:  JANTXIN12  04RA 

B [NA  ] 

C [NA  ] 

MV  IfW/ITT 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  L02  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-550 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5560 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  DIODE  (12 A) 

FAILURE  MODE:  FAIL  OPEN/SHORT  (INHIBIT  LV76) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  6 

5)  AFT  PVA  3 

6)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

7)  DIODE  (12A)  (A2CR7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

3/3 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  PCA  3 

PART  NUMBER:  JANTXIN12  04RA 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  L02  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-551 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/27/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  1/1 

MDAC  ID:  5561  ABORT:  1/1 

ITEM:  DIODE 

FAILURE  MODE:  FAIL  OPEN/SHORT  (INHIBIT  LV76) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  OVERBOARD  BLEED  VALVE  (PV19) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  L02  OVERBOARD  BLEED  VALVE  CLOSING  SOLENOID  (LV76)  CIRCUIT 

7)  DIODE  (2) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  LCA  2 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  INHIBIT  THE  HELIUM  SOLENOID  (LV76).  THE  L02 
OVERBOARD  BLEED  VALVE  (PV19)  WILL  OPEN.  L02  WILL  BE  LOST 
OVERBOARD.  THE  POGO  SUPPRESSION  SYSTEM  WILL  NOT  WORK. 

FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN  STRUCTURAL 
OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE  AMPLITUDE 
WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-552 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

EPD&C/MPS 

5600 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  MPS  INSTRUMENT  POWER  CIRCUIT 

FAILURE  MODE:  FAILS  OPEN,  SHORTED,  INADVERTANT  OPERATIONS 


LEAD  ANALYST:  HOLDEN/LOWERY 


SUBSYS  LEAD: 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  MPS  INSTRUMENT  POWER  CIRCUIT 

4) 

5) 

6) 

7) 

8) 

9) 


A.  J.  MARINO 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION 

EFFECTS/RATIONALE : 

THIS  CIRCUIT  PROVIDES  POWER  TO  THE  MPS  L02/LH2  MANIFOLD  GAGES. 

ALL  COMPONENTS  IN  THIS  CIRCUIT  ARE  CRITICALITY  3.  THE  FAILURE  OF 
THESE  PARTS  WILL  NOT  CAUSE  THE  LOSS  OF  THE  VEHICLE  OR  MISSION. 


REFERENCES: 


SSWH  DWG  10.11A 


REPORT  DATE  01/16/87 


C-553 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/15/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT;  3/3 

MDAC  ID:  5650  ABORT:  3/3 

ITEM:  G02  PRESSURE  FLOW  CONTROL  VALVE  CONTROL  CIRCUIT 

FAILURE  MODE:  ALL  CREDIBLE  MODES:  OPENS,  SHORTS,  LOSS  OF  POWER 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  G02  PRESSURE  FLOW  CONTROL  VALVE  (1  PER  SSME)  (LV53,  LV54  & 
LV55) 

4)  AVIONICS  BAY  4,  5 & 6 

5)  AFT  LCA  1,  2 & 3 

6)  G02  PRESSURE  FLOW  CONTROL  VALVE  CONTROL  CIRCUIT 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  TEMPERATURE,  MISHANDLING/ABUSE 

EFFECTS/RATIONALE : 

THESE  CIRCUITS  PROVIDE  POWER,  CONTROL  AND  MONITORING  FOR  THE  G02 
PRESSURE  FLOW  CONTROL  VALVES. 

THE  CRITICALITY  3 ITEMS  REFERENCED  ON  THIS  SHEET  INCLUDE  6 
DIODES  AND  3 RESISTORS.  THE  ITEMS  WITH  A CRITICALITY  OTHER  THAN 
3 ARE  LISTED  SEPERATELY  UNDER  MDAC  ID  5651  THROUGH  5654. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  39 


REPORT  DATE  01/16/87 


C-554 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/15/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5651 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (1  PER  CIRCUIT) 

FAILURE  MODE:  FAIL  ON  (ACTIVATE  LV53,  LV54,  LV55) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  G02  PRESSURE  FLOW  CONTROL  VALVE  (1  PER  SSME)  (LV53,  LV54  & 
LV55) 

4)  AVIONICS  BAY  4,  5 & 6 

5)  AFT  LCA  1,  2 & 3 

6)  HYBRID  DRIVER,  TYPE  3 (3)  (54V76A121,  55V76A122,  56V76A123) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

GO 2 TO  PRESSURIZE  THE  ET  L02  TANK  FLOWS  THROUGH  THE  PRESSURE  FLOW 
CONTROL  VALVES  (LV53,  LV54  LV55).  THIS  FAILURE  WILL  GIVE  A FALSE 
OPEN  COMMAND  TO  THESE  VALVES. 

THE  WORST  CASE  IS  THE  LOSS  OF  ALL  REDUNDANCY  WILL  RESULT  IN  THE 
OVERPRESSURIZATION  OF  THE  ET  (LOSS  OF  THE  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  39 


REPORT  DATE  01/16/87 


C-555 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/15/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5652 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (1  PER  CIRCUIT) 

FAILURE  MODE:  FUSE  FAIL  OPEN  (INHIBIT  LV53,  LV54,  LV55) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  G02  PRESSURE  FLOW  CONTROL  VALVE  (1  PER  SSME)  (LV53,  LV54  & 
LV55) 

4)  AVIONICS  BAY  4,  5 & 6 

5)  AFT  LCA  1,  2 & 3 

6)  HYBRID  DRIVER,  TYPE  3 (3)  (54V76A121,  55V76A122,  56V76A123) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  PREVENT  THE  OPENING  OF  THE  PRESSURE  CONTROL 
VALVES  (LV53,  LV54,  LV55).  G02  TO  PRESSURIZE  THE  ET  L02  TANK 

FLOWS  THROUGH  THESE  VALVES.  THIS  ET  L02  TANK  ULLAGE  PRESSURE  IS 
NECESSARY  FOR  THE  EFFICIENT  OPERATION  OF  THE  SSMES. 

THE  LOSS  OF  ALL  REDUNDANCY  DURING  AN  ABORT  CAN  CAUSE  THE  LOSS  OF 
THE  VEHICLE  (NOT  ENOUGH  PROPELLENT  TO  FINISH  THE  MISSION). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  39 


REPORT  DATE  01/16/87 


C-556 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/15/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  3/1R 

MDAC  ID:  5653  ABORT:  3/1R 

ITEM:  HYBRID  DRIVER,  TYPE  3 (1  PER  CIRCUIT) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  ON  (ACTIVATE  LV53,  LV54,  LV55) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  GO 2 PRESSURE  FLOW  CONTROL  VALVE  (1  PER  SSME)  (LV53,  LV54  & 
LV55) 

4)  AVIONICS  BAY  4,  5 & 6 

5)  AFT  LCA  1,  2 & 3 

6)  HYBRID  DRIVER,  TYPE  3 (3)  (54V76A121,  55V76A122,  56V76A123) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

G02  TO  PRESSURIZE  THE  ET  L02  TANK  FLOWS  THROUGH  THE  PRESSURE  FLOW 
CONTROL  VALVES  (LV53,  LV54,  LV55).  THIS  FAILURE  WILL  GIVE  A 
FALSE  OPEN  COMMAND  TO  THESE  VALVES. 

THE  WORST  CASE  IS  THE  LOSS  OF  ALL  REDUNDANCY  WILL  RESULT  IN  THE 
OVERPRESSURIZATION  OF  THE  ET  (LOSS  OF  THE  VEHICLE). 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  39 


REPORT  DATE  01/16/87 


C-557 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/15/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5654 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


HYBRID  DRIVER,  TYPE  3 (1 
PREMATURE/ERRONEOUS  OFF 


PER  CIRCUIT) 
(INHIBIT  LV53 , 


LV54,  LV55) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

3)  G02  PRESSURE  FLOW  CONTROL  VALVE  (1  PER  SSME)  (LV53,  LV54  & 
LV55) 

4)  AVIONICS  BAY  4,  5 & 6 

V)  HYBRIDADRivER?  TYPE  3 (3)  (54V76A121,  55V76A122,  56V76A123) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/2R 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A[2]  B[P] 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  AFT  LCA  1,  2 & 3 

PART  NUMBER:  MC477-0263-0002 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


TOTS^AILURE  WIIL* PREVENT  THE  OPENING  OF  THE  PRESSURE  CONTROL 
S LV54  LV55).  G02  TO  PRESSURIZE  THE  ET  L02  TANK 

FLOWS  THROUGH  THESE  VALVES.  THIS  ET  L02  TANK  ULLAGE  PRESSURE  IS 

NECESSARY  FOR  THE  EFFICIENT  OPERATION  THE  LOSS 

THE  LOSS  OF  ALL  REDUNDANCY  DURING  AN  ABORT  CAN  CAUSE  THE  LOSS 

THE  VEHICLE  (NOT  ENOUGH  PROPELLENT  TO  FINISH  THE  MISSION). 


OF 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  39 


REPORT  DATE  01/16/87 


C-558 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5700 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

CIRCUIT 
FAILURE  MODE: 


L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  CONTROL 
ALL  CREDIBLE  MODES:  OPENS,  SHORTS,  LOSS  OF  POWER 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (2)  (PV20  PV21) 

4)  AVIONICS  BAY  4 & 5 1 ' 

5)  AFT  LCA  1 & 2 

6)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  CONTROL  CIRCUIT 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA  ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION  MECH 

SHOCK,  VIBRATION,  TEMPERATURE,  MISHa5SLi5g/ABIJSE 

EFFECTS/RATIONALE : 

E CIRCUITS  PROVIDE  POWER,  CONTROL  AND  MONITORING  FOR  THE  L02 
POGO  ACCUMULATOR  RECIRCULATION  VALVES.  °R  ™E  1/52 

SlSE^  nrJn?cS  REFERENCED  °N  THIS  SHEET  INCLUDE  6 
RESISTORS  AND  4 DIODES.  THE  ITEMS  WITH  A CRITICALITY  OTHER  THAW 

3 ARE  LISTED  SEPERATELY  UNDER  MDAC  ID  5701  THROUGH  5705 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-559 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5701 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 (2  PER  CIRCUIT) 

FAILURE  MODE:  FAIL  ON  (FALSE  OPEN  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (2)  (PV20,  PV21) 

4)  AVIONICS  BAY  4 & 5 

5)  AFT  LCA  1 & 2 

6)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  CLOSING  SOLENOID 

(2)  (LV77,  LV78) 

7)  HYBRID  DRIVER,  TYPE  3 (2  PER  CIRCUIT)  (4)  (54V76A12 1AR(2) , 
55V7  6A12  2AR ( 2 ) ) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  1 & 2 

PART  NUMBER:  MC477-0263-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  PREMATURELY  ACTIVATE  THE  HELIUM  SOLENOIDS 
(LV77,  LV78) , CLOSING  THE  POGO  RECIRCULATION  VALVES  (PV20,  PV21). 
THE  LOSS  OF  ALL  REDUNDANCY  WILL  STOP  THE  POGO  SUPPRESSION  SYSTEM. 
THE  FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN 
STRUCTURAL  OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE 
AMPLITUDE  WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-560 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  3/1R 

MDAC  ID:  5702  ABORT:  3/1R 

ITEM:  MDM  (FA1) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  ON  (FALSE  OPEN  COMMAND) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (PV20) 

4)  AVIONICS  BAY  4 

5)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  CLOSING  SOLENOID 
(LV77 ) 

6)  MDM  (FA1)  (54V72A7) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  4 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  PREMATURELY  ACTIVATE  THE  HELIUM  SOLENOID 
(LV77) , CLOSING  THE  POGO  RECIRCULATION  VALVE  (PV20).  THE  LOSS  OF 
ALL  REDUNDANCY  WILL  STOP  THE  POGO  SUPPRESSION  SYSTEM. 

THE  FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN 
STRUCTURAL  OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE 
AMPLITUDE  WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-561 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

EPD&C/MPS  FLIGHT:  3/1R 

5703  ABORT:  3/1R 

ITEM:  MDM  (FA2) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  ON  (FALSE  OPEN  COMMAND) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (PV21) 

4)  AVIONICS  BAY  5 

5)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  CLOSING  SOLENOID 
( LV7  8 ) 

6)  MDM  (FA2)  (55V72A8) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SATING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS /RATIONALE : 

THIS  FAILURE  WILL  PREMATURELY  ACTIVATE  THE  HELIUM  SOLENOID 
(LV78) , CLOSING  THE  POGO  RECIRCULATION  VALVE  (PV21).  THE  LOSS  OF 
ALL  REDUNDANCY  WILL  STOP  THE  POGO  SUPPRESSION  SYSTEM. 

THE  FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN 
STRUCTURAL  OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE 
AMPLITUDE  WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


REPORT  DATE  01/16/87 


C-562 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5704 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  MDM  (FA3) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  ON  (FALSE  OPEN  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (PV20) 

4)  AVIONICS  BAY  6 

5)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  CLOSING  SOLENOID 
(LV77 ) 

6)  MDM  (FA3)  (56V72A9) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/1R  TAL: 

ONORBIT:  3/3  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  PREMATURELY  ACTIVATE  THE  HELIUM  SOLENOID 
(LV77) , CLOSING  THE  POGO  RECIRCULATION  VALVE  (PV20).  THE  LOSS  OF 
ALL  REDUNDANCY  WILL  STOP  THE  POGO  SUPPRESSION  SYSTEM. 

THE  FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN 
STRUCTURAL  OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE 
AMPLITUDE  WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-563 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5705 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  MDM 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  ON  (FALSE  OPEN  COMMAND) 
LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  (PV21) 

4)  AVIONICS  BAY  6 

5)  L02  POGO  ACCUMULATOR  RECIRCULATION  VALVE  CLOSING  SOLENOID 
( LV7  8 ) 


6) 

MDM  (FA4)  (56V72A10) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THIS  FAILURE  WILL  PREMATURELY  ACTIVATE  THE  HELIUM  SOLENOID 
(LV78) , CLOSING  THE  POGO  RECIRCULATION  VALVE  (PV21).  THE  LOSS  OF 
ALL  REDUNDANCY  WILL  STOP  THE  POGO  SUPPRESSION  SYSTEM. 

THE  FAILURE  OF  THE  POGO  SUPPRESSION  SYSTEM  COULD  RESULT  IN 
STRUCTURAL  OSCILLATIONS  AND  FEEDLINE  PRESSURES  OF  UNPREDICTABLE 
AMPLITUDE  WHICH  COULD  LEAD  TO  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  14 


REPORT  DATE  01/16/87 


C-564 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/08/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  3/3 

MDAC  ID:  5750  ABORT:  3/3 

ITEM:  ET/ ORBITER  DISCONNECT  VALVE  CONTROL  CIRCUIT 

FAILURE  MODE:  ALL  CREDIBLE  MODES:  OPENS,  SHORTS,  LOSS  OF  POWER 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  5 & 6 

5)  AFT  PCA  2 & 3 

6)  AFT  LCA  2 & 3 

7)  ET/ORBITER  DISCONNECT  VALVE  CONTROL  CIRCUIT 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  TEMPERATURE,  MISHANDLING/ABUSE 

EFFECTS/RATIONALE : 

THESE  CIRCUITS  PROVIDE  POWER,  CONTROL  AND  MONITORING  FOR  THE  FEED 
DISCONNECT  VALVE. 

THE  CRITICALITY  3 ITEMS  REFERENCED  ON  THIS  SHEET  INCLUDE  12 
RESISTORS  AND  7 DIODES.  THE  ITEMS  WITH  A CRITICALITY  OTHER  THAN 
3 ARE  LISTED  SEPERATELY  UNDER  MDAC  ID  5751  THROUGH  5779. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-565 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5751 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  MDM  (FA2) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  ON  (FALSE  OPEN  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  5 

5)  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46)  CIRCUIT 

6)  MDM  (FA2)  (55V72A8) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  A FALSE  OPEN  COMMAND  TO  THE  OPENING  SOLENOID  (LV46) 
COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-566 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/08/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/2R 

MDAC  ID: 

5752 

ABORT: 

3/3 

ITEM: 

MDM  (FA3) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  ON  (FALSE  OPEN  COMMAND) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  6 

5)  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46)  CIRCUIT 

6)  MDM  (FA3)  (55V72A9) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  A FALSE  OPEN  COMMAND  TO  THE  OPENING  SOLENOID  (LV46) 
COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87  C-567 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5753 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  MDM  (FA4) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  ON  (FALSE  OPEN  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  6 

5)  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46)  CIRCUIT 

6)  MDM  (FA4)  (55V72A10) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  A FALSE  OPEN  COMMAND  TO  THE  OPENING  SOLENOID  (LV46) 
COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-568 


INDEPENDENT  ORB I TER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/16/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

3/2R 

MDAC  ID: 

5754 

ABORT: 

3/3 

ITEM: 

MDM  (FA2) 

FAILURE  MODE:  PREMATURE/ ERRONEOUS 

OFF  (INHIBIT  LV47) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPD&C/MPS 

2) 

02 

3) 

ET/ORBITER 

FEED  DISCONNECT  VALVE  (PD1) 

4) 

AVIONICS  BAY  5 

5) 

FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

6) 

MDM  (FA2) 

(55V72A8) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  5 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  THE  FAILURE  OF  THE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV47)  COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-569 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5755 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  nun  

FAILURE  MODE:  PREMATURE/ ERRONEOUS  OFF  (INHIBIT  LV47) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

5)  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

6)  MDM  (FA3)  (56V72A9) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


raEEra^sM^ir  valve  (pdd  is  closed  after  meco  to  pmvent 

OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  THE  FAILURE  OF  THE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV47)  COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-570 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5756 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  MDM  (FA4) 

FAILURE  MODE:  PREMATURE/ERRONEOUS  OFF  (INHIBIT  LV47) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  6 

5)  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

6)  MDM  (FA4)  (56V72A10) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AVIONICS  BAY  6 

PART  NUMBER:  SEE  REFERENCES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

TOE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  THE  FAILURE  OF  THE  CLOSE  COMMAND  TO  THE  CLOSING 
SOLENOID  (LV47)  COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-571 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5761 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FAIL  ON  (FALSE  OPEN  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46)  CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (56V76A123) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  3 

PART  NUMBER:  MC477-0263-0002 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  A FALSE  OPEN  COMMAND  TO  THE  OPENING  SOLENOID  (LV46) 
COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-572 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/08/87 
SUBSYSTEM;  EPD&C/MPS 
MDAC  ID:  5762 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HYBRID  DRIVER,  TYPE  1 

FAILURE  MODE:  PREMATURE/ ERRONEOUS  ON  (FALSE  OPEN  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPD&C/MPS 

2) 

02 

3) 

ET/ORBITER  FEED 

DISCONNECT  VALVE  (PD1) 

4) 

AVIONICS  BAY  6 

5) 

AFT  LCA  3 

6) 

FEED  DISCONNECT 

VALVE 

OPENING  SOLENOID  (LV46)  CIRCUIT 

7) 

HYBRID  DRIVER, 

TYPE  1 

(56V76A123) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  3 

PART  NUMBER:  MC477-0261-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  A FALSE  OPEN  COMMAND  TO  THE  OPENING  SOLENOID  (LV46) 
COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-573 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5763 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FAIL  ON  (FALSE  OPEN  COMMAND) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 . 

6)  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46)  CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (55V76A122) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AFT  LCA  2 

PART  NUMBER:  MC477-0263-0002 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYI/3ADS. 

THEREFORE  A FALSE  OPEN  COMMAND  TO  THE  OPENING  SOLENOID  (LV46) 
COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-574 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5764 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  REMOTE  POWER  CONTROLLER  (RPC  19) 

FAILURE  MODE:  FAIL  ON/CLOSED 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  6 

5)  AFT  PCA  3 

6)  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (RPC  19) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  /NA  RTLS : 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AO A: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


LOCATION:  AFT  PCA  3 

PART  NUMBER:  MC450-0017-1030 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  A FALSE  OPEN  COMMAND  TO  THE  OPENING  SOLENOID  (LV46) 
COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-575 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5765 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  REMOTE  POWER  CONTROLLER  (RPC  20) 

FAILURE  MODE:  FAIL  ON/CLOSED 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  5 

5)  AFT  PCA  2 

6)  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (RPC  20) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  PCA  2 

PART  NUMBER:  MC450-0017-1030 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  A FALSE  OPEN  COMMAND  TO  THE  OPENING  SOLENOID  (LV46) 
COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-576 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  2/1R 

MDAC  ID:  5766  ABORT:  2/1R 

ITEM:  REMOTE  POWER  CONTROLLER  (RPC  19) 

FAILURE  MODE:  FAILS  PREMATURE/OFF  (INHIBIT  LV46) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  6 

5)  AFT  PCA  3 

6)  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (RPC  19) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  PCA  3 

PART  NUMBER:  MC450-0017-1030 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

L02  MUST  FLOW  THROUGH  THE  FEED  DISCONNECT  VALVE  (PD1)  TO  FEED  THE 
SSMES.  THE  POSSIBLE  RESULTS  OF  A FLOW  INTERUPTION  INCLUDE  SSME 
SHUTDOWN,  UNCONTAINED  ENGINE  DAMAGE  AND  FIRE/EXPLOSION. 

THEREFORE  THE  LOSS  OF  THE  OPEN  COMMAND  TO  THE  OPENING  SOLENOID 
(LV46)  WILL  CAUSE  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-577 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/16/87 

EPD&C/MPS 

5767 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM: 

FAILURE  MODE: 


REMOTE  POWER  CONTROLLER  (RPC  20) 
FAILS  PREMATURE/OFF  (INHIBIT  LV46) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  5 
5x  AFT  PCA  2 

6)  FEED  DISCONNECT  VALVE  OPENING  SOLENOID  (LV46)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (RPC  20) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  PCA  2 

PART  NUMBER:  MC450-0017-1030 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


M2ESSIt“SwNT^0UGH  THE  PEED  DISCONNECT  VALVE  (PD1)  TO  FEED  THE 
SSMES.  THE  POSSIBLE  RESULTS  OF  A FLOW  INTERUPTION  INCLUDE  SSME 
SHUTDOWN,  UNCONTAINED  ENGINE  DAMAGE  AND  FIRE/EXPLOSION. 

THEREFORE  THE  LOSS  OF  THE  OPEN  COMMAND  TO  THE  OPENING  SOLENOID 
(LV46)  WILL  CAUSE  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A?  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-578 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPDSC/MPS 
MDAC  ID:  5771 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FAIL  ON  (FALSE  CLOSE  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  6 

5)  AFT  LCA  3 

6)  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (56V76A123) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  2/1R  RTLS: 

LIFTOFF:  2/1R  TAL: 

ONORBIT:  3/3  AO A: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


LOCATION:  AFT  LCA  3 

PART  NUMBER:  MC477-0263-0002 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

L02  MUST  FLOW  THROUGH  THE  FEED  DISCONNECT  VALVE  (PD1)  TO  FEED  THE 
SSMES.  THE  POSSIBLE  RESULTS  OF  A FLOW  INTERUPTION  INCLUDE  SSME 
SHUTDOWN,  UNCONTAINED  ENGINE  DAMAGE  AND  FIRE/EXPLOSION. 

THEREFORE  A FALSE  COMMAND  TO  THE  CLOSING  SOLENOID  (LV47)  WILL 
CAUSE  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-579 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5772 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  HYBRID  DRIVER,  TYPE  1 

FAILURE  MODE:  PREMATURE/ERRONEOUS  ON  (FALSE  CLOSE  COMMAND) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPD&C/MPS 

2) 

02 

3) 

ET/ORBITER  FEED 

DISCONNECT  VALVE  (PD1) 

4) 

AVIONICS  BAY  6 

5) 

AFT  LCA  3 

6) 

FEED  DISCONNECT 

VALVE 

CLOSING  SOLENOID  (LV47)  CIRCUIT 

7) 

HYBRID  DRIVER, 

TYPE  1 

(56V76A123) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  3 

PART  NUMBER:  MC477-02 61-0002 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

L02  MUST  FLOW  THROUGH  THE  FEED  DISCONNECT  VALVE  (PD1)  TO  FEED  THE 
SSMES.  THE  POSSIBLE  RESULTS  OF  A FLOW  INTERUPTION  INCLUDE  SSME 
SHUTDOWN,  UNCONTAINED  ENGINE  DAMAGE  AND  FIRE/EXPLOSION. 

THEREFORE  A FALSE  COMMAND  TO  THE  CLOSING  SOLENOID  (LV47)  WILL 
CAUSE  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-580 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/08/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT;  2/1R 

MDAC  ID:  5773  ABORT;  2/1R 

ITEM:  HYBRID  DRIVER,  TYPE  3 

FAILURE  MODE:  FAIL  ON  (FALSE  CLOSE  COMMAND) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  5 

5)  AFT  LCA  2 

6)  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

7)  HYBRID  DRIVER,  TYPE  3 (55V76A122) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  2 

PART  NUMBER:  MC477-0263-0002 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

L02  MUST  FLOW  THROUGH  THE  FEED  DISCONNECT  VALVE  (PD1)  TO  FEED  THE 
SSMES.  THE  POSSIBLE  RESULTS  OF  A FLOW  INTERUPTION  INCLUDE  SSME 
SHUTDOWN,  UNCONTAINED  ENGINE  DAMAGE  AND  FIRE/EXPLOSION. 

THEREFORE  A FALSE  COMMAND  TO  THE  CLOSING  SOLENOID  (LV47)  WILL 
CAUSE  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-581 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5774 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (RPC  20) 

FAILURE  MODE:  FAIL  ON/CLOSED 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  6 

5)  AFT  PCA  3 

6)  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (RPC  20) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C[P] 

LOCATION:  AFT  PCA  3 

PART  NUMBER:  MC450-0017-1036 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

L02  MUST  FLOW  THROUGH  THE  FEED  DISCONNECT  VALVE  (PD1)  TO  FEED  THE 
SSMES.  THE  POSSIBLE  RESULTS  OF  A FLOW  INTERUPTION  INCLUDE  SSME 
SHUTDOWN,  UNCONTAINED  ENGINE  DAMAGE  AND  FIRE/EXPLOSION. 

THEREFORE  A FALSE  COMMAND  TO  THE  CLOSING  SOLENOID  (LV47)  WILL 
CAUSE  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-582 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/08/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT:  2/1R 

MDAC  ID:  5775  ABORT:  2/1R 

ITEM:  REMOTE  POWER  CONTROLLER  (RPC  21) 

FAILURE  MODE:  FAIL  ON/CLOSED 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  5 

5)  AFT  PCA  2 

6)  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (RPC  21) 

a) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  PCA  2 

PART  NUMBER:  MC450-0017-1036 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

L02  MUST  FLOW  THROUGH  THE  FEED  DISCONNECT  VALVE  (PD1)  TO  FEED  THE 
SSMES.  THE  POSSIBLE  RESULTS  OF  A FLOW  INTERUPTION  INCLUDE  SSME 
SHUTDOWN,  UNCONTAINED  ENGINE  DAMAGE  AND  FIRE/EXPLOSION. 

THEREFORE  A FALSE  COMMAND  TO  THE  CLOSING  SOLENOID  (LV47)  WILL 
CAUSE  THE  LOSS  OF  THE  VEHICLE. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-583 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATEi  1/16/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPD&C/MPS  FLIGHT: 

MDAC  ID:  5776  ABORT:  3/3 

ITEM:  REMOTE  POWER  CONTROLLER  (RPC  20) 

FAILURE  MODE:  FAIL  PREMATURE/OFF  (INHIBIT  LV47) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  6 

5)  AFT  PCA  3 

6)  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (RPC  20) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A C 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  PCA  3 

PART  NUMBER:  MC450-0017-1036 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  THE  LOSS  OF  THE  CLOSE  COMMAND  TO  THE  CLOSING  SOLENOID 
(LV47)  COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-584 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5777 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  REMOTE  POWER  CONTROLLER  (RPC  21) 

FAILURE  MODE:  FAIL  PREMATURE/OFF  (INHIBIT  LV47) 


LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  5 

5)  AFT  PCA  2 

6)  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

7)  REMOTE  POWER  CONTROLLER  (RPC  21) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

LOCATION:  AFT  PCA 

2 

PART  NUMBER:  MC450-0017-1036 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  THE  LOSS  OF  THE  CLOSE  COMMAND  TO  THE  CLOSING  SOLENOID 
(LV47)  COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-585 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 
SUBSYSTEM:  EPD&C/MPS 
MDAC  ID:  5778 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  3/3 


ITEM:  DIODE  (12 A) 

FAILURE  MODE:  FAIL  OPEN  (INHIBIT  LV47) 

LEAD  ANALYST:  HOLDEN/LOWERY  SUBSYS  LEAD:  A.  J.  MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  5 
5 \ AFT  PCA  2 

6)  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

7)  DIODE  (12A)  (2)  (A2CR13,  A2CR14) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  PCA  2 

PART  NUMBER:  JANTXIN12  04RA 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  THE  LOSS  OF  THE  CLOSE  COMMAND  TO  THE  CLOSING  SOLENOID 
(LV47)  COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-586 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/27/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPD&C/MPS 

FLIGHT: 

2/2 

MDAC  ID: 

5779 

ABORT: 

3/3 

ITEM: 

DIODE  (12 A) 

FAILURE  MODE 

1:  FAIL  OPEN  (INHIBIT 

LV47) 

LEAD  ANALYST 

: HOLDEN/ LOWERY 

SUBSYS  LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPD&C/MPS 

2)  02 

3)  ET/ ORBITER  FEED  DISCONNECT  VALVE  (PD1) 

4)  AVIONICS  BAY  6 

5)  AFT  PCA  3 

6)  FEED  DISCONNECT  VALVE  CLOSING  SOLENOID  (LV47)  CIRCUIT 

7)  DIODE  (12A)  (A2CR16) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

/NA 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

2/2 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] C [NA  ] 


LOCATION:  AFT  PCA  3 

PART  NUMBER:  JANTXIN1204RA 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECH 

SHOCK,  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THE  FEED  DISCONNECT  VALVE  (PD1)  IS  CLOSED  AFTER  MECO  TO  PREVENT 
OUTGASSING  OF  02  IN  THE  ONORBIT  PHASE.  THIS  OUTGASSING  COULD 
INTERFERE  WITH  THE  OPERATION  OF  SOME  PAYLOADS. 

THEREFORE  THE  LOSS  OF  THE  CLOSE  COMMAND  TO  THE  CLOSING  SOLENOID 
(LV47)  COULD  CAUSE  THE  LOSS  OF  THE  MISSION. 


REFERENCES:  SSWH  DWG  10.11A;  VS72-941099  SHEET  21 


REPORT  DATE  01/16/87 


C-587 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/09/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  3/3 

MDAC  ID:  6011  ABORT:  3/3 

ITEM:  POWER  & CONTROL  CIRCUITS  FOR  LH2  FEEDLINE 

DISCONNECT  VALVE  _ 

FAILURE  MODE:  OPEN,  SHORTED,  INADVERTENT  OPERATION,  ERRONEOUS 

OUTPUT 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  HYDROGEN  FEED  SYSTEM 

3)  LH2  FEEDLINE  DISCONNECT  VALVE  (PD2) 

4)  HELIUM  OPEN/CLOSE  CONTROL  SOLENOID  VALVES  (LV48,LV49) 

5)  AVBAY  5,6 

6)  AFT  PCA  2,3 

7)  AFT  LCA  2,3 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRE LAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING : 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  THERMAL  SHOCK,  VIBRATION,  CONTAMINATION,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCED  WILL  HAVE  NO  HAZARDOUS  EFFECT  ON 
CREW,  VEHICLE  OR  MISSION  AND  ARE  THUS  ASSIGNED  CRITICALITY  3/3. 
ELECTRICAL  COMPONENTS  INCLUDED  ARE  4 DIODES,  12  MDMS  AND  13 
RESISTORS.  COMPONENTS  ASSIGNED  CRITICALITIES  OTHER  THAN  3/3  ARE 
ADDRESSED  SEPARATELY  UNDER  MDAC  6012  THROUGH  6016. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  15.  MAJOR  HARDWARE 

ITEMS  ASSOCIATED  WITH  THIS  CIRCUITRY  ARE  THE  LH2  FEEDLINE 
DISCONNECT  VALVE,  MC284-0389-0051(0411, 0431) , AND  ITS 
CORRESPONDING  CONTROL  SOLENOIDS,  MC284-0404-0021. 


REPORT  DATE  01/16/87 


C-588 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/09/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6012 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  HYBRID  DRIVER  CONTROLLER  (6) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  HYDROGEN  FEED  SYSTEM 

3)  LH2  FEEDLINE  DISCONNECT  VALVE  (PD2) 

4)  HELIUM  OPEN/CLOSE  CONTROL  SOLENOID  VALVES  (LV48,LV49) 

5)  AVBAY  5,6 

6)  AFT  LCA  2,3 

7)  HYBRID  DRIVER  CONTROLLER  (4  TYPE  III,  2 TYPE  I) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

3/3 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A ( 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC477-02  63, 0002, 

MC4 77-02 61-0002  ; 

56V76A12AR 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

SECOND  FAILURE  WILL  PREVENT  OPERATION  (OPEN  OR  CLOSE)  OF  THE 
FEEDLINE  DISCONNECT  OR  MAY  ALLOW  VALVE  TO  CLOSE  DURING  FILL,  WITH 
THE  POSSIBLE  RESULT  A RUPTURE  OF  THE  FEEDLINE  MANIFOLD  AND 
CREATION  OF  A FIRE/EXPLOSION  HAZARD.  FAILURE  CAUSING  THE  VALVE 
TO  CLOSE  DURING  POWERED  FLIGHT  WILL  DESTROY  THE  VEHICLE.  FAILURE 
DURING  ASCENT  WILL  ALLOW  LH2  TO  ESCAPE  THE  ET  AT  SEPARATION, 
CAUSING  RECONTACT  WITH  THE  ORBITER  AND  LOSS  OF  VEHICLE,  OR 
RECONTACT  MAY  CAUSE  DAMAGE  TO  TPS,  PREVENTING  A SAFE  REENTRY. 

AERO  FORCES  DURING  RTLS  WILL  PREVENT  RECONTACT. 

REFERENCES:  RI  DRAWING  VS72-941102,  SHT  15. 


REPORT  DATE  01/16/87 


C-589 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/09/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6013 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (4) 

FAILURE  MODE:  FAIL  OPEN,  FAIL  CLOSED,  INADVERTENT  OPERATION 


LEAD  ANALYST:  MCNI COLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1) 

EPDC/MPS 

2) 

HYDROGEN  FEED  SYSTEM 

3) 

LH2  FEEDLINE  DISCONNECT 

VALVE  (PD2) 

4) 

HELIUM  OPEN/CLOSE  CONTROL  SOLENOID  VALVES  (LV48,LV49) 

5) 

AVBAY  5,6 

6) 

AFT  PCA  2,3 

7) 

REMOTE  POWER  CONTROLLER 

(4) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

2/1R 

RTLS: 

3/3 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC450-0017-1030:  55V76A132RPC22,23, 

56V76A133RPC21 , 22 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

SECOND  FAILURE  WILL  PREVENT  OPERATION  OF  THE  FEEDLINE  DISCONNECT 
VALVE.  PRELAUNCH  FAILURE  MAY  CAUSE  LAUNCH  DELAY,  OR  MAY  ALLOW 
VALVE  TO  CLOSE  DURING  FILL,  WITH  THE  POSSIBLE  RESULT  A RUPTURE  OF 
THE  FEEDLINE  MANIFOLD  AND  CREATION  OF  A FIRE/EXPLOSION 
HAZARD.  FAILURE  CAUSING  THE  VALVE  TO  CLOSE  DURING  POWERED  FLIGHT 
WILL  DESTROY  THE  VEHICLE.  FAILURE  DURING  ASCENT  WILL  ALLOW  H2  TO 
ESCAPE  THE  ET  AND  ORBITER  AT  SEPARATION,  CAUSING  RECONTACT  AND 
DAMAGE  TO  TPS  TILES,  PREVENTING  A SAFE  REENTRY,  OR 
DESTRUCTION  OF  THE  VEHICLE.  AERO  FORCES  DURING  RTLS  WILL  PREVENT 
RECONTACT . 

REFERENCES:  RI  DRAWING  VS72-941102,  SHT  15. 


REPORT  DATE  01/16/87 


C-590 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/09/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6014 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  ISOLATION  AND  BLOCKING  DIODES  (6) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  HYDROGEN  FEED  SYSTEM 

3)  LH2  FEEDLINE  DISCONNECT  VALVE  (PD2) 

4)  HELIUM  OPEN/ CLOSE  CONTROL  SOLENOID  VALVES  (LV48,LV49) 

5)  AVBAY  5,6 

6)  AFT  PCA  2,3 

7)  ISOLATION  AND  BLOCKING  DIODES 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  JANTX1N12 04RA:  55V76A132A2CR8, 15,  55V76A133A2CR5, 6, 

55V76A133A3CR5, 13 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

SECOND  FAILURE  WILL  PREVENT  OPERATION  OF  THE  FEEDLINE  DISCONNECT 
VALVE.  PRELAUNCH  FAILURE  MAY  CAUSE  LAUNCH  DELAY.  FAILURE  DURING 
ASCENT  WILL  ALLOW  H2  TO  ESCAPE  THE  ET  AND  ORBITER  AT  SEPARATION, 
CAUSING  RECONTACT  AND  DAMAGE  TO  TPS  TILES,  PREVENTING  A 
SAFE  REENTRY,  OR  IMMEDIATE  DESTRUCTION  OF  THE  VEHICLE.  AERO 
FORCES  DURING  RTLS  WILL  PREVENT  RECONTACT. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  15 


REPORT  DATE  01/16/87 


C-591 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  2/1R 

MDAC  ID:  6015  ABORT:  2/1R 

ITEM:  FLIGHT  CRITICAL  AFT  MDM  (3) 

FAILURE  MODE:  FAIL  ON,  FAIL  OFF 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  HYDROGEN  FEED  SYSTEM 

3)  LH2  FEEDLINE  DISCONNECT  VALVE  (PD2) 

4)  HELIUM  OPEN/CLOSE  CONTROL  SOLENOID  VALVES  (LV48,LV49) 

5)  AVBAY  5,6 

6)  FLIGHT  CRITICAL  AFT  MDM  (3) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

3/3 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC615-0004-6110, 5110: 

56V72A9, 10, 

55V75A14 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

SECOND  FAILURE  OF  A REDUNDANT  ITEM  WILL  PREVENT  OPERATION  OF  THE 
FEEDLINE  DISCONNECT  VALVE.  PRELAUNCH  FAILURE  MAY  CAUSE  LAUNCH 
DELAY,  OR  MAY  ALLOW  VALVE  TO  CLOSE  DURING  FILL,  WITH  THE  POSSIBLE 
RESULT  A RUPTURE  OF  THE  FEEDLINE  MANIFOLD  AND  CREATION  OF  A 
FIRE/EXPLOSION  HAZARD.  FAILURE  CAUSING  THE  VALVE  TO  CLOSE  DURING 
POWERED  FLIGHT  WILL  DESTROY  THE  VEHICLE.  FAILURE  DURING  ASCENT 
WILL  ALLOW  H2  TO  ESCAPE  THE  ET  AND  ORBITER  AT  SEPARATION,  CAUSING 
RECONTACT  AND  DAMAGE  TO  THE  TPS  TILES,  PREVENTING  A SAFE 
REENTRY,  OR  IMMEDIATE  DESTRUCTION  OF  THE  VEHICLE.  AERO  FORCES 
WILL  PREVENT  RECONTACT  DURING  RTLS. 

REFERENCES:  RI  DRAWING  VS72-941102,  SHT  15 


REPORT  DATE  01/16/87 


C-592 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6016 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  INDICATOR  SWITCH  (PD2) 

FAILURE  MODE:  FAIL  OPEN,  FAIL  TO  TRANSFER 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  HYDROGEN  FEED  SYSTEM 

3)  LH2  FEEDLINE  DISCONNECT  VALVE  (PD2) 

4)  POSITION  INDICATOR  SWITCH 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  50V41PD2 


CAUSES:  VIBRATION,  CONTAMINATION,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

PRELAUNCH  FAILURE  MAY  CAUSE  LAUNCH  DELAY.  FAILURE  DURING  ASCENT 
MAY  CAUSE  INCORRECT  POSITION  INDICATION,  ALLOWING  ET  SEP  WITH 
DISCONNECT  VALVES  OPEN.  ESCAPING  H2  COULD  CAUSE  THE  ORBITER 
AND/OR  ET  TO  ROTATE  AND  RECONTACT  EACH  OTHER.  RECONTACT  CAN 
CAUSE  DAMAGE  TO  TPS  TILES,  PREVENTING  A SAFE  REENTRY,  OR 
IMMEDIATE  DESTRUCTION  OF  THE  ORBITER. 

AERO  FORCES  WILL  PREVENT  RECONTACT  DURING  AN  RTLS  ABORT. 
REFERENCES:  RI  DRAWING  VS72-941102,  SHT  15 


REPORT  DATE  01/16/87 


C-593 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/15/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  6021 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  POWER  & CONTROL  CIRCUITS  FOR  LH2  RTLS  DUMP  VALVES 

(2) 

FAILURE  MODE:  OPEN,  SHORTED,  INADVERTENT  OPERATION,  ERRONEOUS 

OUTPUT 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  RTLS  DUMP  SYSTEM 

3)  LH2  RTLS  DUMP  VALVES  (PV17,PV18)  NORMALLY  CLOSED 

4)  LH2  RTLS  DUMP  VALVE  OPENING  SOLENOIDS  (LV72,LV73) 

5)  AVBAY  4,6 

6)  AFT  LCA  1,3 

7)  MID  PCA-3 , AFT  PCA-1 

8)  VALVE  POWER  & CONTROL  CIRCUITS 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCED  WILL  HAVE  NO  HAZARDOUS  EFFECT  ON 
CREW,  VEHICLE  OR  MISSION  AND  ARE  THUS  ASSIGNED  CRITICALITY  3/3. 
ELECTRICAL  COMPONENTS  INCLUDED  ARE  14  RESISTORS,  2 DIODES,  2 MDMS 
AND  2 INDICATOR  SWITCHES. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14.  MAJOR  HARDWARE 

ITEMS  ASSOCIATED  WITH  THIS  CIRCUITRY  ARE  THE  LH2  RTLS  DUMP 
VALVES,  MC284-0395-0023 (0024, 0033, 0034, 0043, 0044, 0053, 0054)  AND 
THEIR  ASSOCIATED  OPENING  SOLENOIDS,  MC284-0404-0012. 


REPORT  DATE  01/16/87 


C-594 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/15/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  3/3 

MDAC  ID:  6022  ABORT:  3/1R 

ITEM:  HYBRID  DRIVER  CONTROLLER  (6) 

FAILURE  MODE:  FAIL  OPEN 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  RTLS  DUMP  SYSTEM 

3)  LH2  RTLS  DUMP  VALVES  (PV17,PV18)  NORMALLY  CLOSED 

4)  LH2  RTLS  DUMP  VALVE  OPENING  SOLENOIDS  (LV72,LV73) 

5)  AVBAY  4,6 

6)  AFT  LCA  1,3 

7)  HYBRID  DRIVER  CONTROLLERS  (6) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC477-0261-0002,  56V76A121AR(2) ; MC477-0263-0002, 

56V7  6A12  3 AR ( 4 ) 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  PREVENT  LH2  RTLS  DUMP.  HYDROGEN  WILL 
VENT  THROUGH  THE  RELIEF  VALVE  DURING  RTLS  DESCENT  AND  LANDING, 
CREATING  A FIRE/EXPLOSION  HAZARD. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-595 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/15/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  6023 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (4) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  RTLS  DUMP  SYSTEM 

3)  LH2  RTLS  DUMP  VALVES  (PV17,PV18)  NORMALLY  CLOSED 

4)  LH2  RTLS  DUMP  VALVE  OPENING  SOLENOIDS  (LV72,LV73) 

5)  AVBAY  4,6 

6)  MID  PCA-3,  AFT  PCA-1 

7)  REMOTE  POWER  CONTROLLERS  (4) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P 3 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC450-0017:  40V76A27RPC29,30,  54V76A131RPC31, 32 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 


EFFECTS /RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  PREVENT  LH2  RTLS  DUMP  VALVES  FROM 
OPERATING.  HYDROGEN  WILL  VENT  THROUGH  THE  RELIEF  VALVE  DURING 
RTLS  DESCENT  AND  LANDING,  CREATING  A FIRE/EXPLOSION  HAZARD. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-596 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
3/1R 

ITEM:  BLOCKING  DIODE  (4) 

FAILURE  MODE:  FAIL  OPEN 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/15/87 

EPDC/MPS 

6024 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  MCNI COLL/ EMMONS  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  RTLS  DUMP  SYSTEM 

3)  LH2  RTLS  DUMP  VALVES  (PV17,PV18)  NORMALLY  CLOSED 

4)  LH2  RTLS  DUMP  VALVE  OPENING  SOLENOIDS  (LV72,LV73) 

5)  AVBAY  4,6 

6)  AFT  PCA-1,  MID  PCA-3 

7)  BLOCKING  DIODES  (4) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  JANTX1N1204RA:  40V76A27A4CR7,8,  54V76A131A3CR3 , 9 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  PREVENT  LH2  RTLS  DUMP  VALVES  FROM 
OPERATING.  HYDROGEN  WILL  VENT  THROUGH  THE  RELIEF  VALVE  DURING 
RTLS  DESCENT  AND  LANDING,  CREATING  A FIRE/EXPLOSION  HAZARD. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-597 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/15/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6025 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/1R 


ITEM:  ISOLATION  DIODE  (2) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

LH2  RTLS  DUMP  SYSTEM 

3) 

LH2  RTLS  DUMP  VALVES 

(PV17,PV18)  NORMALLY  CLOSED 

4) 

LH2  RTLS  DUMP  VALVE 

OPENING  SOLENOIDS  (LV72,LV73) 

5) 

AVBAY  4,6 

6) 

AFT  PCA-1 

7) 

ISOLATION  DIODES  (2) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  JANTX1N1204RA:  54V76A13 1CR4 , 10 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  PREVENT  LH2  RTLS  DUMP  VALVES  FROM 
OPERATING.  HYDROGEN  WILL  VENT  THROUGH  THE  RELIEF  VALVE  DURING 
RTLS  DESCENT  AND  LANDING,  CREATING  A FIRE/EXPLOSION  HAZARD. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-598 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6026 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  FLIGHT  CRITICAL  AFT  MDM  (FA1,FA3,FA4) 

FAILURE  MODE:  FAIL  ON,  INADVERTENT  OPERATION 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

LH2  RTLS  DUMP 

SYSTEM 

3) 

LH2  RTLS  DUMP 

VALVES  (PV17, PV18)  NORMALLY  CLOSED 

4) 

LH2  RTLS  DUMP 

VALVE  OPENING  SOLENOIDS  (LV72,LV73) 

5) 

AVBAY  4,6 

6) 

MDM  (3) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  54V72A7,  56V72A9,10 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  CAUSE  LH2  RTLS  DUMP  VALVES  TO  OPEN, 
ALLOWING  LH2  TO  ESCAPE  THE  VEHICLE  AND  CREATE  A FIRE/EXPLOSION 
HAZARD.  LOSS  OF  LH2  WILL  CAUSE  ENGINES  TO  SHUTDOWN  EARLY, 
RESULTING  IN  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-599 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6027 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/1R 


ITEM: 

FAILURE  MODE: 


FLIGHT  CRITICAL  AFT  MDM  (FA1,FA3,FA4) 
FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


EPDC/MPS 

LH2  RTLS  DUMP  SYSTEM 

LH2  RTLS  DUMP  VALVES  (PV17,PV18)  NORMALLY  CLOSED 
LH2  RTLS  DUMP  VALVE  OPENING  SOLENOIDS  (LV72,LV73) 
AVBAY  4,6 
MDM  (3) 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

3/1R 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  SEE  REFERENCES 

PART  NUMBER:  54V72A7,  56V72A9,10 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : „ ‘ „„ 

LOSS  OF  ALL  REDUNDANCY  WILL  PREVENT  LH2  RTLS  DUMP  VALVES  FROM 
OPERATING.  HYDROGEN  WILL  VENT  THROUGH  THE  RELIEF  VALVE  DURING 
RTLS  DESCENT  AND  LANDING,  CREATING  A FIRE/EXPLOSION  HAZARD. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-600 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

EPDC/MPS 

6051 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  LH2  RECIRCULATION  PUMP  VALVE  OPENING  SOLENOID 

ENERGIZING  CIRCUITRY 

FAILURE  MODE:  ERRONEOUS  OUTPUT,  LOSS  OF  OR  PARTIAL  OUTPUT 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  H2  EPDC 

3)  LH2  RECIRCULATION  PUMP  VALVES  (PV14,  PV15,  PV16) 

4)  LH2  RECIRCULATION  PUMP  VALVE  OPENING  SOLENOID  fLV36) 

5)  AV  BAY  4 

6)  AFT  LCA-1 

7)  LH2  RECIRCULATION  PUMP  VALVE  OPENING  SOLENOID  ENERGIZING 
CIRCUITRY 

B) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  CIRCUIT  COMPONENT  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  MAY  CAUSE  LAUNCH  DELAY.  NO  HAZARDOUS  CONDITION  FOR  CREW 
OR  VEHICLE. 


REFERENCES:  VS72-941102,  SHT  12. 


REPORT  DATE  01/16/87 


C-601 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/04/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6061 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  RECIRCULATION  PUMP  CONTROL  CIRCUITRY 

FAILURE  MODE:  ERRONEOUS  OUTPUT,  LOSS  OF  OR  PARTIAL  OUTPUT 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  MPS 

2)  H2  EPDC 

3)  LH2  RECIRCULATION  PUMP  (PP1,  PP2,  PP3) 

4)  AV  BAYS  4,5,6 

5)  LH2  RECIRCULATION  PUMP  CONTROL  CIRCUITRY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FU 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  CIRCUIT  COMPONENT  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  MAY  CAUSE  LAUNCH  DELAY.  NO  HAZARDOUS  CONDITION  FOR  CREW 
OR  VEHICLE. 


REFERENCES:  VS72-941102,  SHT  12. 


REPORT  DATE  01/16/87 


C-602 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  6071 


ITEM:  FUSE,  1A  (3) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  INBOARD  FILL  & DRAIN,  TOPPING,  AND  HIGH  POINT  BLEED 
VALVES  (PV12, PV13 , PV22) 

4)  PANEL  R4  (SWITCH  LOCATION) 

5)  FUSES  (3) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/ SAFING: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  ME451-0018-0100; 

32V73A4F12, 13, 14 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

SECOND  FAILURE  WILL  PRECLUDE  MPS  DUMP  AND  INERT.  HYDROGEN  WILL 
ESCAPE  THROUGH  THE  RELIEF  VALVE  DURING  ENTRY  AND  LANDING, 

CREATING  A FIRE/EXPLOSION  HAZARD.  NO  EFFECT  ON  RTLS  BECAUSE  RTLS 
DUMP  IS  NOT  MADE  THROUGH  FILL  & DRAIN  VALVES. 


REFERENCES:  VS72-941102,  SHT  13. 


REPORT  DATE  01/16/87 


C-603 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
2/1R 
2/1R 

ITEM:  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  OPEN 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/22/87 

EPDC/MPS 

6072 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  INBOARD  FILL  & DRAIN,  TOPPING,  AND  HIGH  POINT  BLEED 
VALVES  (PV12 , PV13 , PV22) 

4)  PANEL  R4  (SWITCH  LOCATION) 

5)  TOGGLE  SWITCH 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

2/1R 
A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  ME452-0102-7256:  32V73A459 


CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

SECOND  FAILURE  WILL  PRECLUDE  MPS  DUMP  AND  INERT.  HYDROGEN  WILL 
ESCAPE  THROUGH  THE  RELIEF  VALVE  DURING  ENTRY  AND  LANDING, 

CREATING  A FIRE/EXPLOSION  HAZARD.  NO  EFFECT  ON  RTLS  BECAUSE  RTLS 
DUMP  IS  NOT  MADE  THROUGH  FILL  & DRAIN  VALVES. 


REFERENCES:  VS72-941102,  SHT  13. 


REPORT  DATE  01/16/87 


C-604 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6073 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  SHORTED 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  INBOARD  FILL  & DRAIN,  TOPPING,  AND  HIGH  POINT  BLEED 
VALVES  (PV12,PV13,PV22) 

4)  PANEL  R4  (SWITCH  LOCATION) 

5)  TOGGLE  SWITCH 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/ SAFING: 
REDUNDANCY  SCREENS: 

2/1R 
A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  ME452-0102-7256:  32V73A459 


CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

SECOND  FAILURE  DURING  TANK  FILL  MAY  CAUSE  I/B  FILL  & DRAIN  VALVE 
TO  CLOSE,  POSSIBLY  RESULTING  IN  RUPTURE  OF  THE  FILL  LINE,  RELEASE 
OF  LH2  AND  CREATION  OF  A FIRE/EXPLOSION  HAZARD.  SECOND  FAILURE 
AFTER  ENGINE  START  MAY  ALLOW  VALVE  TO  OPEN,  RESULTING  IN 
GAS  FROM  THE  FILL  LINE  CAUSING  CAVITATION  IN  THE  ENGINE  PUMPS  AND 
ENGINE  EXPLOSION.  SECOND  FAILURE  CAN  PRECLUDE  MPS  DUMP,  ALLOWING 
H2  TO  ESCAPE  OVERBOARD  DURING  ENTRY  AND  LANDING,  CREATING  A 
FIRE/EXPLOSION  HAZARD. 


REFERENCES:  VS72-941102,  SHT  13. 


REPORT  DATE  01/16/87 


C-605 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6074 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  HYBRID  DRIVER  CONTROLLER  (4) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  INBOARD  FILL  & DRAIN,  TOPPING,  AND  HIGH  POINT  BLEED 
VALVES  (PV12 , PV13 , PV22) 

4)  PANEL  R4  (SWITCH  LOCATION) 

5)  AV  BAY  4 

6)  AFT  LCA-1 

7)  HYBRID  DRIVER  CONTROLLERS  (4) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING: 

3/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC477-02 63-0002 : 

54V76A121AR(3) 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  MAKE  THE  INBOARD  FILL  & DRAIN  VALVE 
INOPERATIVE.  THIS  WILL  PRECLUDE  LH2  DUMP  AND  ALLOW  H2  TO  VENT 
DURING  ENTRY  AND  LANDING,  CREATING  A FIRE/EXPLOSION  HAZARD.  NO 
HAZARD  DURING  RTLS,  SINCE  RTLS  DUMP  DOES  NOT  USE  THE  FILL  & 
DRAIN  VALVES. 


REFERENCES:  VS72-941102,  SHT  13. 


REPORT  DATE  01/16/87 


C-606 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6075 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

3/1R 


ITEM:  HYBRID  DRIVER  CONTROLLER 

FAILURE  MODE:  INADVERTENT  OUTPUT  (SHORTED) 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  INBOARD  FILL  & DRAIN,  TOPPING,  AND  HIGH  POINT  BLEED 
VALVES  (PV12,PV13, PV22) 

4)  PANEL  R4  (SWITCH  LOCATION) 

5)  AV  BAY  4 

6)  AFT  LCA-1 

7)  HYBRID  DRIVER  CONTROLLERS  (4) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FU1 

PRELAUNCH: 

2/1R 

RTLS: 

3/3 

LIFTOFF: 

2/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC477-0263-0002:  54V76A121AR(3) 


CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

SECOND  FAILURE  DURING  TANK  FILL  MAY  CAUSE  INBOARD  FILL  & DRAIN 
VALVE  TO  CLOSE,  POSSIBLY  RESULTING  IN  RUPTURE  OF  FILL  & DRAIN 
LINE,  RELEASE  OF  LH2  AND  CREATION  OF  A FIRE/EXPLOSION  HAZARD. 
SECOND  FAILURE  CAN  PRECLUDE  MPS  DUMP,  ALLOWING  H2  TO  ESCAPE 
OVERBOARD  DURING  ENTRY  AND  LANDING,  CREATING  A FIRE/EXPLOSION 
HAZARD.  NO  HAZARD  DURING  RTLS. 


REFERENCES:  VS72-941102,  SHT  13. 


REPORT  DATE  01/16/87 


C-607 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  3/1R 

MDAC  ID:  6076  ABORT:  3/1R 

ITEM:  ISOLATION  DIODES  (16) 

FAILURE  MODE:  FAIL  OPEN,  FAIL  SHORTED 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  INBOARD  FILL  & DRAIN,  TOPPING,  AND  HIGH  POINT  BLEED 
VALVES  (PV12, PV13 , PV22) 


4) 

PANEL  R4  (SWITCH 

LOCATION) 

5) 

AV  BAY  4 

6) 

AFT  LCA-1 

7) 

ISOLATION  DIODES 

(16) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/S AFING: 

3/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  JANTX  54V76A121CR 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  MAKE  THE  INBOARD  FILL  & DRAIN  VALVE 
INOPERATIVE.  THIS  WILL  PRECLUDE  LH2  DUMP  AND  ALLOW  H2  TO  VENT 
DURING  ENTRY  AND  LANDING,  CREATING  A FIRE/EXPLOSION  HAZARD.  NO 
HAZARD  DURING  RTLS,  SINCE  RTLS  DUMP  DOES  NOT  USE  THE  FILL  & 
DRAIN  VALVES. 


REFERENCES:  VS72-941102,  SHT  13. 


REPORT  DATE  01/16/87 


C-608 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6077 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  CURRENT  LIMITING  RESISTORS  (9)  AND  BLEED  RESISTORS 

(2) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  INBOARD  FILL  & DRAIN,  TOPPING,  AND  HIGH  POINT  BLEED 
VALVES  (PV12,PV13,PV22) 

4)  PANEL  R4  (SWITCH  LOCATION) 

5)  AV  BAY  4 

6)  AFT  LCA-1 

7)  CURRENT  LIMITING  RESISTORS  (9)  AND  BLEED  RESISTORS  (2) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  RLR07C512GR(7) , RLR20C222GR(2) , RLR07C182G(2)  : 

54V76A121 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  WILL  HAVE  NO  HAZARDOUS  EFFECT  ON  CREW  OR  VEHICLE. 


REFERENCES:  VS72-941102,  SHT  13. 


REPORT  DATE  01/16/87 


C-609 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6078 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  MDM  (FA1,  2,  LAI) 

FAILURE  MODE:  FAIL  ON,  INADVERTENT  OPERATION 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  INBOARD  FILL  & DRAIN,  TOPPING,  AND  HIGH  POINT  BLEED 
VALVES  (PV12 , PV13 , PV22) 

4)  PANEL  R4  (SWITCH  LOCATION) 

5)  AV  BAY  4,5,6 

6)  AFT  LCA-1 

7)  MDM 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  54V72A7,  54V72A8,  56V72A33 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  ALLOW  LH2  TO  ESCAPE  THE  VEHICLE 
THROUGH  THE  FILL  & DRAIN  VALVES,  CREATING  A FIRE/ EXPLOSION 
HAZARD,  OR  DEPLETION  OF  FUEL  AND  EARLY  ENGINE  SHUTDOWN,  CAUSING 
LOSS  OF  VEHICLE. 


REFERENCES:  VS72-941102,  SHT  13  AND  16. 


REPORT  DATE  01/16/87 


C-610 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/22/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6079 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  VALVE  SWITCH  INDICATOR 

FAILURE  MODE:  FAIL  OPEN,  INADVERTENT  OPERATION 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  INBOARD  FILL  & DRAIN,  TOPPING,  AND  HIGH  POINT  BLEED 
VALVES  (PV12, PV13 , PV22) 

4)  PANEL  R4  (SWITCH  LOCATION) 

5)  AV  BAY  4,5,6 

6)  AFT  LCA-1 

7)  VALVE  SWITCH  INDICATOR  (3) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS 

: 3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A 

[NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  50V41PV12 

,13,22 

CAUSES:  VIBRATION,  CONTAMINATION, 

MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

FAILURE  WILL  HAVE  NO  HAZARDOUS  EFFECT  ON  CREW  OR  VEHICLE. 


REFERENCES:  VS72-941102,  SHT  13  AND  16. 


REPORT  DATE  01/16/87 


C-611 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6081 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  1A  FUSE 

FAILURE  MODE:  FAIL  OPEN 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  OUTBOARD  FILL  & DRAIN  VALVE  (PV11) 

4)  OPEN/CLOSE  CONTROL  SOLENOIDS  (LV32,LV33) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  FUSE 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS: 

3/3 

TAL: 

3/3 

AO  A: 

2/1R 

ATO: 

2/1R 

A [ 2 ] 

B [ F ] 

HDW/FUNC 

3/3 

2/1R 

2/1R 

2/1R 


C [ P ] 


LOCATION:  SEE  REFERENCES 

PART  NUMBER:  ME451-0018-0100 


CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

SECOND  FAILURE  WILL  PRECLUDE  MPS  LH2  DUMP.  H2  WILL  VENT 
OVERBOARD  DURING  DESCENT  AND  LANDING,  CREATING  A FIRE/EXPLOSION 

HAZARD.  

NO  HAZARDOUS  EFFECT  ON  RTLS,  BECAUSE  FILL  & DRAIN  VALVES  ARE  NOT 

USED  DURING  RTLS. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-612 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/20/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  2/1R 

MDAC  ID:  6082  ABORT:  2/1R 

ITEM:  TOGGLE  SWITCH,  32V73A438 

FAILURE  MODE:  FAIL  OPEN 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  OUTBOARD  FILL  & DRAIN  VALVE  (PV11) 

4)  OPEN/CLOSE  CONTROL  SOLENOIDS  (LV32,LV33) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  TOGGLE  SWITCH 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ p ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  ME452-0102-7153 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

SECOND  FAILURE  WILL  PRECLUDE  MPS  LH2  DUMP.  H2  WILL  VENT 
OVERBOARD  DURING  DESCENT  AND  LANDING,  CREATING  A FIRE/EXPLOSION 
HAZARD. 

NO  HAZARDOUS  EFFECT  ON  RTLS , BECAUSE  FILL  & DRAIN  VALVES  ARE  NOT 
USED  DURING  RTLS. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-613 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6083 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  SHORTED 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  OUTBOARD  FILL  & DRAIN  VALVE  (PV11) 

4)  OPEN/CLOSE  CONTROL  SOLENOIDS  (LV32,LV33) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  TOGGLE  SWITCH 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/1R 
A [ 2 ] 

B [ P ] 

c [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  ME452-0102-7153 : 32V73A458 


CAUSES:  VIBRATION,  CONTAMINATION,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALT.  REDUNDANCY  CAN  LEAD  TO  SEVERAL  CRITICAL  SITUATIONS, 

AS  FOLLOWS.  FAILURE (S)  DURING  TANK  FILL  CAN  CAUSE  FILL  & DRAIN 
VALVE  TO  CLOSE,  CAUSING  RUPTURE  OF  FILL  LINE,  RELEASING  LH2  AND 
CREATING  A FIRE/EXPLOSION  HAZARD.  FAILURES  DURING  POWERED 
FLIGHT  COULD  ALLOW  FILL  & DRAIN  VALVES  TO  OPEN,  RELEASING  LH2  AND 
CREATING  A FIRE/EXPLOSION  HAZARD  OR  CAUSING  EARLY  ENGINE  SHUTDOWN 
AND  LOSS  OF  VEHICLE.  FAILURES  COULD  PREVENT  LH2  DUMP  AND  ALLOW 
H2  TO  VENT  OVERBOARD  DURING  ENTRY  AND  LANDING,  CREATING  A 
FIRE/EXPLOSION  HAZARD. 

REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-614 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6084 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  HYBRID  DRIVER  CONTROLLER  (2) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  OUTBOARD  FILL  & DRAIN  VALVE  (PV11) 

4)  OPEN/CLOSE  CONTROL  SOLENOIDS  (LV32,LV33) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  AV  BAY  5 

7)  AFT  LCA-2 

8)  HYBRID  DRIVER  CONTROLLER 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING: 

3/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC471-0263-0002 


CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  PREVENT  OPERATION  OF  OUTBOARD  FILL  & 
DRAIN  VALVE,  PRECLUDING  MPS  LH2  DUMP  AND  ALLOWING  H2  TO  VENT 
OVERBOARD  DURING  ENTRY  AND  LANDING.  THIS  WILL  CREATE  A 
FIRE/EXPLOSION  HAZARD  AND  MAY  CAUSE  LOSS  OF  VEHICLE. 

NO  HAZARDOUS  EFFECT  DURING  RTLS,  BECAUSE  THE  O/B  FILL  & DRAIN 
VALVE  IS  NOT  USED  DURING  RTLS  MPS  DUMP. 


REFERENCES:  RI  DRAWING  VS 72 -9 41102,  SHT  14. 


REPORT  DATE  01/16/87 


C-615 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/20/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  2/1R 

MDAC  ID:  6085  ABORT:  2/1R 

ITEM:  HYBRID  DRIVER  CONTROLLER 

FAILURE  MODE:  INADVERTENT  OUTPUT,  SHORTED 

LEAD  ANALYST:  MCNI COLL/ EMMONS  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  OUTBOARD  FILL  & DRAIN  VALVE  (PV11) 

4)  OPEN/CLOSE  CONTROL  SOLENOIDS  (LV32,LV33) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  AV  BAY  5 

7)  AFT  LCA-2 

8)  HYBRID  DRIVER  CONTROLLER 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

2/1R 
A [ 2 ] 

B [ P ] 

c [ p ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC471-0263-0002 


CAUSES:  VIBRATION,  CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  ALLOW  O/B  FILL  & DRAIN  VALVE  TO 
CLOSE  DURING  TANK  FILL,  RESULTING  IN  RUPTURE  OF  FILL  LINE  AND 
RELEASE  OF  LH2,  CREATING  A FIRE/EXPLOSION  HAZARD.  LOSS  OF  ALL 
REDUNDANCY  DURING  POWERED  FLIGHT  WILL  ALLOW  BOTH  FILL  & DRAIN 
VALVES  TO  OPEN,  RELEASING  LH2  AND  CAUSING  EARLY  ENGINE  SHUTDOWN, 
RESULTING  IN  LOSS  OF  VEHICLE.  LOSS  OF  ALL  REDUNDANCY  CAN  ALSO 
PREVENT  OPERATION  OF  O/B  FILL  & DRAIN  VALVE,  PRECLUDING  LH2  DUMP 
AND  ALLOWING  VENTING  OF  H2  TO  CREATE  A FIRE/EXPLOSION  DURING 
ENTRY  AND  LANDING. 

REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-616 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/1R 
3/1R 

ITEM:  ISOLATION  DIODE  (4) 

FAILURE  MODE:  FAIL  OPEN 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/20/87 

EPDC/MPS 

6086 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

LH2  FILL  & DRAIN 

SYSTEM 

3) 

LH2  OUTBOARD  FILL 

& DRAIN  VALVE  (PV11) 

4) 

OPEN/CLOSE  CONTROL  SOLENOIDS  (LV32,LV33) 

5) 

PANEL  R4  (SWITCH 

LOCATION) 

6) 

AV  BAY  5 

7) 

AFT  LCA-2 

8) 

9) 

ISOLATION  DIODES 

(4) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING: 

3/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

c [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  JANTXV1N5551 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  PREVENT  OPERATION  OF  OUTBOARD  FILL  & 
DRAIN  VALVE,  PRECLUDING  MPS  LH2  DUMP  AND  ALLOWING  H2  TO  VENT 
OUTBOARD  DURING  ENTRY  AND  LANDING.  THIS  WILL  CREATE  A 
FIRE/EXPLOSION  HAZARD  AND  MAY  CAUSE  LOSS  OF  VEHICLE. 

NO  HAZARDOUS  EFFECT  DURING  RTLS,  BECAUSE  THE  O/B  FILL  & DRAIN 
VALVE  IS  NOT  USED  DURING  RTLS  MPS  DUMP. 


REFERENCES:  RI  DRAWING  VS 72 -9 41102,  SHT  14. 


REPORT  DATE  01/16/87 


C-617 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/20/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6087 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  CURRENT  LIMITING  RRESISTOR  (4) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  OUTBOARD  FILL  & DRAIN  VALVE  (PV11) 

4)  OPEN/CLOSE  CONTROL  SOLENOIDS  (LV32fLV33) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  AV  BAY  5 

7)  AFT  LCA-2 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO  A: 
ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  SEE  REFERENCES 

PART  NUMBER:  RLR07512GR 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

FAILURE  WILL  HAVE  NO  HAZARDOUS  EFFECT  ON  CREW  OR  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-618 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/1R 
3/1R 

ITEM:  MDM 

FAILURE  MODE:  FAIL  OPEN,  INADVERTENT  OUTPUT 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/26/87 

EPDC/MPS 

6088 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

LH2  FILL  & DRAIN 

SYSTEM 

3) 

LH2  OUTBOARD  FILL 

& DRAIN  VALVE  (PV11) 

4) 

OPEN/CLOSE  CONTROL  SOLENOIDS  (LV32,LV33) 

5) 

PANEL  R4  (SWITCH 

LOCATION) 

6) 

AV  BAY  5 

7) 

MDM  FA2 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MDM  FA2,  55V72A8 


CAUSES:  VIBRATION,  CONTAMINATION,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WILL  PREVENT  OPERATION  OF  OUTBOARD  FILL 
AND  DRAIN  VALVE,  PRECLUDING  MPS  LH2  DUMP  AND  ALLOWING  H2  TO  VENT 
OVERBOARD  DURING  ENTRY  AND  LANDING.  THIS  WILL  CREATE  A 
FIRE/EXPLOSION  HAZARD  AND  MAY  CAUSE  LOSS  OF  VEHICLE. 

NO  HAZARDOUS  EFFECT  DURING  RTLS,  BECAUSE  THE  O/B  FILL  AND  DRAIN 
VALVE  IS  NOT  USED  DURING  RTLS  MPS  DUMP. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-619 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/26/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  3/3 

MDAC  ID:  6089  ABORT:  3/3 

ITEM:  VALVE  SWITCH  INDICATOR 

FAILURE  MODE:  FAIL  OPEN,  SHORTED 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  OUTBOARD  FILL  & DRAIN  VALVE  (PV11) 

4)  OPEN/CLOSE  CONTROL  SOLENOIDS  (LV32,LV33) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  VALVE  SWITCH  INDICATOR 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  50V411PV11 


CAUSES:  VIBRATION,  CONTAMINATION,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

THE  FAILURE  WILL  HAVE  NO  HAZARDOUS  EFFECT  ON  CREW  OR  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-620 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/27/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  3/3 

MDAC  ID:  6101  ABORT:  3/3 

ITEM:  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  POWER  AND 

CONTROL  CIRCUITS 

FAILURE  MODE:  LOSS  OF  OUTPUT,  ERRONEOUS  OUTPUT 

LEAD  ANALYST:  MCNI COLL/ EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  FILL  & DRAIN  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  (PV8) 

4)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  CLOSING  SOLENOID  (LV25) 

5)  PANEL  R4  (SWITCH  POSITION) 

6)  MID  PCA-1,  -3 

7)  VALVE  POWER  AND  CONTROL  CIRCUITS 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCES  WILL  NOT  AFFECT  CREW,  VEHICLE  OR 
MISSION.  ELECTRICAL  ITEMS  INCLUDED  ARE  5 RESISTORS,  2 DIODES  AND 
2 MDMS.  ELECTRICAL  ITEMS  WITH  A CRITICALITY  OTHER  THAN  3/3  ARE 
LISTED  SEPARATELY  UNDER  MDAC  ID  6102  THROUGH  6109. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT  14.  MAJOR  HARDWARE 

ASSOCIATED  WITH  THIS  CIRCULTRY  IS  THE  LH2  FEEDLINE  RELIEF 
ISOLATION  VALVE. 


REPORT  DATE  01/16/87 


C-621 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
3/1R 
3/1R 

ITEM:  REMOTE  POWER  CONTROLLER  (2) 

FAILURE  MODE:  FAIL  OPEN,  INADVERTENT  OPERATION 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/27/87 

EPDC/MPS 

6102 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  (PV8) 

4)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  CLOSING  SOLENOID  (LV25) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  MID  PCA-1,  -3 

7)  RPC  24,  31 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC450-0017-1030:  40V76A25AR48,  40V76A27AR29 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  MAY  CAUSE  ISOLATION  VALVE  TO  OPEN  DURING 
PRELAUNCH  OR  POWERED  FLIGHT.  ESCAPING  H2  WILL  CREATE  A 
FIRE/EXPLOSION  HAZARD.  FAILURE  OF  REDUNDANT  ITEMS  CAN  ALSO 
PREVENT  VALVE  FROM  OPENING  AT  MECO,  ALLOWING  RUPUTRE  OF  LH2 
FEEDLINE  MANIFOLD  AND  LOSS  OF  VEHICLE. 


REFERENCES:  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-622 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6103 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  HYBRID  DRIVER  CONTROLLER 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  (PV8) 

4)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  CLOSING  SOLENOID  (LV25) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  MID  PCA-1,  -3 

7)  HYBRID  DRIVER  CONTROLLER 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC477-0263-0002:  40V76A25AR48,  40V76A27AR29 


CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

SECOND  FAILURE  MAY  CAUSE  NORMALLY  OPEN  ISOLATION  VALVE  TO  OPEN 
DURING  PRELAUNCH  OR  POWERED  FLIGHT.  ESCAPING  H2  WILL  CREATE  A 
FIRE/EXPLOSION  HAZARD.  LOSS  OF  FUEL  COULD  ALSO  CAUSE  EARLY 
ENGINE  SHUTDOWN  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-623 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6104 


ITEM:  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  (PV8) 

4)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  CLOSING  SOLENOID  (LV25) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  TOGGLE  SWITCH 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FWD  FLIGHT  DECK,  PANEL  R4 

PART  NUMBER:  ME452-0102-7354 : 32V73A458 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  MAY  CAUSE  NORMALLY  OPEN  ISOLATION  VALVE  TO 
OPEN  DURING  PRELAUNCH  OR  POWERED  FLIGHT.  ESCAPING  H2  WILL  CREATE 
FIRE/EXPLOSION  HAZARD.  LOSS  OF  FUEL  COULD  ALSO  CAUSE  EARLY 
ENGINE  SHUTDOWN  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-624 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6105 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1R 

1/1R 


ITEM:  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  SHORTED,  INADVERENT  OPERATION 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  (PV8) 

4)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  CLOSING  SOLENOID  (LV25) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  TOGGLE  SWITCH 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1R 

RTLS: 

1/1R 

LIFTOFF: 

1/1R 

TAL: 

1/1R 

ONORBIT: 

3/3 

AOA: 

1/1R 

DEORBIT: 

3/3 

ATO: 

1/1R 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FWD  FLIGHT  DECK,  PANEL  R4 

PART  NUMBER:  ME452-0102-7354:  32V73A458 


CAUSES:  VIBRATION,  CONTAMINATION,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

A SHORT  ACROSS  THE  “OPEN"  CONTACTS  WILL  OVERRIDE  REDUNDANT  CLOSE 
COMMANDS  AND  TURN  OFF  REDUNDANT  VALVE  DRIVERS.  THE  ISOLATION 
VALVE  WILL  OPEN  AND  ESCAPING  H2  WILL  CREATE  A FIRE/EXPLOSION 
HAZARD. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-625 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6106 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  CURRENT  LIMITING  RESISTOR  (3) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNI COLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  (PV8) 

4)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  CLOSING  SOLENOID  (LV25) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  MID  PCA-1 , -3 

7)  CURRENT  LIMITING  RESISTORS  (3) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  RWR8051211FR:  32V73A4A9R1,  32V73A4ABR3 


CAUSES:  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  MAY  CAUSE  NORMALLY  OPEN  ISOLATION  VALVE  TO 
OPEN  DURING  PRELAUNCH  OR  POWERED  FLIGHT.  ESCAPING  H2  WILL  CREATE 
A FIRE/EXPLOSION  HAZARD.  LOSS  OF  FUEL  COULD  ALSO  CAUSE  EARLY 
ENGINE  SHUTDOWN  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-626 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6107 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  ISOLATION  DIODE  (11) 

FAILURE  MODE:  FAIL  OPEN,  FAIL  SHORTED,  OUT  OF  TOLERANCE,  LEAKAGE 


LEAD  ANALYST:  MCNI COLL/ EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  (PV8) 

4)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  CLOSING  SOLENOID  (LV25) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  MID  PCA  -1,  -3 

7)  ISOLATION  DIODES  (11) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A[l]  B [ P ] C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  JANTXV1N424C:  3273A4CR 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  MAY  CAUSE  NORMALLY  OPEN  ISOLATION  VALVE  TO 
OPEN  DURING  PRELAUNCH  OR  POWERED  FLIGHT.  ESCAPING  H2  WILL  CREATE 
A FIRE/EXPLOSION  HAZARD.  LOSS  OF  FUEL  COULD  ALSO  CAUSE  EARLY 
ENGINE  SHUTDOWN  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-627 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  6108 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM:  ISOLATION  DIODE  (3) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  DUMP  SYSTEM 

3)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  (PV8) 

4)  LH2  FEEDLINE  RELIEF  ISOLATION  VALVE  CLOSING  SOLENOID  (LV25) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  MID  PCA  -1,  -3 

7)  ISOLATION  DIODES  (3) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B ( F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  JANTX1N1204RA:  40V76A25ACR11,  4076A27A4CR1,  CR2 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

SECOND  FAILURE  MAY  CAUSE  NORMALLY  OPEN  ISOLATION  VALVE  TO  OPEN 
DURING  PRELAUNCH  OR  POWERED  FLIGHT.  ESCAPING  H2  WILL  CREATE  A 
FIRE/EXPLOSION  HAZARD.  LOSS  OF  FUEL  COULD  ALSO  CAUSE  EARLY 
ENGINE  SHUTDOWN  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-628 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6109 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  MDM  (FA1,  FA3,  FA4) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

LH2  DUMP  SYSTEM 

3) 

LH2  FEEDLINE  RELIEF  ISOLATION 

VALVE 

(PV8) 

4) 

LH2  FEEDLINE  RELIEF  ISOLATION 

VALVE 

CLOSING  SOLENOID  (LV25) 

5) 

PANEL  R4  (SWITCH  LOCATION) 

6) 

AV  BAY  4,  6 

7) 

MDM  FA1,  FA3 , FA4 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  54V75A13,  54V75A15,  54V72A9 


CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  MAY  CAUSE  NORMALLY  OPEN  ISOLATION  VALVE  TO 
OPEN  DURING  PRELAUNCH  OR  POWERED  FLIGHT.  ESCAPING  H2  WILL  CREATE 
A FIRE/EXPLOSION  HAZARD.  LOSS  OF  FUEL  COULD  ALSO  CAUSE  EARLY 
ENGINE  SHUTDOWN  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  14. 


REPORT  DATE  01/16/87 


C-629 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6121 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  1/1R 


ITEM:  HYBRID  DRIVER  CONTROLLER 

FAILURE  MODE:  FAIL  ON,  SHORTED,  INADVERTENT  OUTPUT 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  GH2  PRESSURIZATION  FLOW  CONTROL  VALVE  (LV56,LV57,LV58) 

4)  PANEL  R2  (SWITCH  LOCATION) 

5)  AVBAY  4,5,6 

6)  AFT  LCA-1, -2,-3 

7)  HYBRID  DRIVER  CONTROLLERS  (6) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

1/1R 

LIFTOFF: 

2/1R 

TAL: 

1/1R 

ONORBIT: 

3/3 

AOA: 

1/1R 

DEORBIT: 

3/3 

ATO: 

1/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  54V76A121,  55V76A122, 

56V76A123 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

SECOND  ASSOCIATED  FAILURE  WILL  CAUSE  TWO  FLOW  CONTROL  VALVES  TO 
BE  OPEN  UNNECESSARILY.  THIS  WILL  RESULT  IN  OVERPRESSURIZATION  OF 
LH2  TANK.  RELIEVING  OF  EXCESS  GH2  PRESSURE  AT  LOW  ALTITUDE  WILL 
CREATE  A FIRE/EXPLOSION  HAZARD.  FIRST  FAILURE  DURING 
ABORTS  (ONE  ENGINE  OUT)  CAN  CREATE  SUCH  A HAZARD. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  26. 


REPORT  DATE  01/16/87 


C-630 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6122 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

1/1R 


ITEM:  HYBRID  DRIVER  CONTROLLER 

FAILURE  MODE:  FAIL  OPEN 


LEAD 

ANALYST:  MCNICOLL/EMMONS 

SUBSYS 

LEAD:  A.  J.  MARINO 

BREAKDOWN  HIERARCHY: 

1) 

EPDC/MPS 

2) 

LH2  TANK  PRESSURIZATION  SYSTEM 

3) 

GH2  PRESSURIZATION  FLOW  CONTROL 

VALVE 

(LV56,LV57,LV58) 

4) 

PANEL  R2  (SWITCH  LOCATION) 

5) 

AVBAY  4,5,6 

6) 

AFT  LCA-1,-2,-3 

7) 

HYBRID  DRIVER  CONTROLLERS  (6) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1R 

LIFTOFF: 

2/1R 

TAL: 

1/1R 

ONORBIT: 

3/3 

AOA: 

1/1R 

DEORBIT: 

3/3 

ATO: 

1/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  54V76A121,  55V76A122, 

56V76A123 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

SECOND  ASSOCIATED  FAILURE  WILL  PREVENT  TWO  FLOW  CONTROL  VALVES 
FROM  OPENING  WHEN  THEY  SHOULD.  THIS  WILL  RESULT  IN  LOW  ULLAGE 
PRESSURE  AND  POSSIBLE  LOSS  OF  VEHICLE.  FIRST  FAILURE  DURING 
ABORTS  (ONE  ENGINE  ALREADY  OUT)  CAN  CAUSE  LOW  ULLAGE  PRESSURE  AND 
LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  26. 


REPORT  DATE  01/16/87 


C-631 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/28/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6123 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  1/1R 


ITEM:  FUSE  (3) 

FAILURE  MODE:  FAIL  OPEN 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  TANK  PRESSURIZATION  SYSTEM 

3)  GH2  PRESSURIZATION  FLOW  CONTROL  VALVE  (LV56,LV57,LV58) 

4)  PANEL  R2  (SWITCH  LOCATION) 

5)  FUSE,  1A  (F18,F19,F20) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1R 

LIFTOFF: 

2/1R 

TAL: 

1/1R 

ONORBIT: 

3/3 

AO  A: 

1/1R 

DEORBIT: 

3/3 

ATO: 

1/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

SECOND  ASSOCIATED  FAILURE  WILL  PREVENT  TWO  FLOW  CONTROL  VALVES 
FROM  OPENING  WHEN  THEY  SHOULD.  THIS  WILL  RESULT  IN  LOW  ULLAGE 
PRESSURE  AND  POSSIBLE  LOSS  OF  VEHICLE.  FIRST  FAILURE  DURING 
ABORTS  (ONE  ENGINE  ALREADY  OUT)  CAN  CAUSE  LOW  ULLAGE  PRESSURE  AND 
LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  26. 


REPORT  DATE  01/16/87 


C-632 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/04/86 

EPDC/MPS 

6131 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  GH2  PRESSURIZATION  LINE  VENT  VALVE  SOLENOID 

ENERGIZING  CIRCUITRY 

FAILURE  MODE:  ERRONEOUS  OUTPUT,  LOSS  OF  OR  PARTIAL  OUTPUT 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

GH2  PRESSURIZATION 

LINE 

3) 

AV  BAYS  4,5,6 

4) 

GH2  PRESSURIZATION 

LINE 

5) 

6) 

7) 

8) 

9) 

VENT  VALVE  (LV52) 

VENT  VALVE  ENERGIZING  CIRCUITRY 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AFT  COMPARTMENT 

PART  NUMBER:  SEE  REFERENCES 

CAUSES:  CIRCUIT  COMPONENT  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  DOES  NOT  CREATE  A HAZARDOUS  CONDITION  FOR  CREW  OR 
VEHICLE. 


REFERENCES:  VS72-941102,  SHT  16. 


REPORT  DATE  01/16/87 


C-633 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/21/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6141 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  MDM  (FA4) 

FAILURE  MODE:  FAILS  OPEN,  INADVERTENT  OPERATION,  FAILS  ON 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  DISCONNECT  VALVE  (PD3) 

4)  OPEN/ CLOSE  CONTROL  SOLENOIDS  (LV50,LV51) 

5)  AV  BAY  6 

6)  MDM  FA4 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

1/1 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/3 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  SEE  REFERENCES 

PART  NUMBER:  56V72A10 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

FAILURE  WILL  PREVENT  CLOSURE  OF  RECIRCULATION  DISCONNECT  VALVE. 
IF  THE  VALVE  IS  NOT  CLOSED  AT  ET  SEP,  THE  THRUST  OF  ESCAPING  LH2 
CAN  CAUSE  RECONTACT  WITH  THE  ET  AND  LOSS  OF  THE  ORBITER.  IF 
RECONTACT  DAMAGE  IS  LIMITED  TO  TPS  TILES,  THE  ORBITER  CAN  BE 
DESTROYED  DURING  ENTRY. 

AERO  FORCES  WILL  PREVENT  RECONTACT  FOLLOWING  AN  RTLS  ET  SEP. 
REFERENCES:  VS72-941102,  SHT  16. 


REPORT  DATE  01/16/87 


C-634 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/21/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  6142 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  HYBRID  DRIVER  CONTROLLER  (2) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  DISCONNECT  VALVE  (PD3) 

4)  OPEN/CLOSE  CONTROL  SOLENOIDS  (LV50,LV51) 

5)  AV  BAY  6 

6)  AFT  LCA-3 

7)  HYBRID  DRIVER  CONTROLLERS  (2) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO  A: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC471-0263-0002: 

56V76A123AR 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

FAILURE  WILL  PREVENT  CLOSURE  OF  RECIRCULATION  DISCONNECT  VALVE. 
IF  THE  VALVE  IS  NOT  CLOSED  AT  ET  SEP,  THE  THRUST  OF  ESCAPING  LH2 
CAN  CAUSE  RECONTACT  WITH  THE  ET  AND  LOSS  OF  THE  ORBITER.  IF 
RECONTACT  DAMAGE  IS  LIMITED  TO  TPS  TILES,  THE  ORBITER  CAN  BE 
DESTROYED  DURING  ENTRY. 

AERO  FORCES  WILL  PREVENT  RECONTACT  FOLLOWING  AN  RTLS  ET  SEP. 


REFERENCES:  VS72-941102,  SHT  16. 


REPORT  DATE  01/16/87 


C-635 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/21/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPDC/MPS 

FLIGHT: 

3/3 

MDAC  ID: 

6143 

ABORT: 

3/3 

ITEM: 

CURRENT  LIMITING 

RESISTOR,  5. IK  (4) 

FAILURE  MODE:  FAIL  OPEN 

LEAD  ANALYST:  MCNI COLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  DISCONNECT  VALVE  (PD3) 

4)  OPEN/ CLOSE  CONTROL  SOLENOIDS  (LV50,LV51) 

5)  AV  BAY  6 

6)  AFT  LCA-3 

7)  CURRENT  LIMITING  RESISTORS  (4) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  RLR07C512GR:  56V76A123R 


CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

NO  HAZARDOUS  EFFECT  ON  CREW  OR  VEHICLE. 


REFERENCES:  VS72-941102,  SHT  16. 


REPORT  DATE  01/16/87 


C-636 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/21/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6144 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  ISOLATION  DIODES  (4) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  DISCONNECT  VALVE  (PD3) 

4)  OPEN/CLOSE  CONTROL  SOLENOIDS  (LV50,LV51) 

5)  AV  BAY  6 

6)  AFT  LCA-3 

7)  ISOLATION  DIODES  (4) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  JANTX1N5551:  56V76A123CR 


CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

NO  HAZARDOUS  EFFECT  ON  CREW  OR  VEHICLE. 


REFERENCES:  VS72-941102,  SHT  16. 


REPORT  DATE  01/16/87 


C-637 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/21/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  3/3 

MDAC  ID:  6145  ABORT:  3/3 

ITEM:  POSITION  INDICATOR  SWITCH 

FAILURE  MODE:  FAIL  OPEN,  FAIL  SHORTED 

LEAD  ANALYST:  MCNI COLL/ EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  RECIRCULATION  SYSTEM 

3)  LH2  RECIRCULATION  DISCONNECT  VALVE  (PD3) 

4)  POSITION  INDICATOR  SWITCH 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  50V41PD3 

CAUSES:  VIBRATION,  CONTAMINATION,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

NO  HAZARDOUS  EFFECT  ON  CREW  OR  VEHICLE. 


REFERENCES:  VS72-941102,  SHT  16. 


REPORT  DATE  01/16/87 


C-638 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/28/87 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

EPDC/MPS 

FLIGHT: 

3/3 

MDAC  ID: 

6151 

ABORT: 

3/3 

ITEM: 

LH2  PREVALVE 

POWER  & CONTROL 

CIRCUITS 

FAILURE  MODE:  FAIL  OPEN,  FAIL  SHORTED,  INADVERTENT  OUTPUT, 

ERRONEOUS  OUTPUT 

LEAD  ANALYST:  MCNI COLL/ EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVES  (PV4,  PV5,  PV6) 

4)  PREVALVE  CONTROL  SOLENOIDS  (LV18,  LV19,  LV20,  LV21,  LV22, 
LV23) 


5) 

PANEL  R4  (SWITCH 

LOCATION) 

6) 

AVBAY  4,5,6 

7) 

AFT  PCA  -4, -5, -6 

8) 

AFT  LCA  -1,-2, -3 

9) 

PREVALVE  POWER  & 

CONTROL  CIRCUITS 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

ALL  CIRCUIT  COMPONENTS  ARE  CRITICALITY  3/3  WITH  THE  EXCEPTION  OF 
9 FUSES,  3 SWITCHES,  12  RPCS,  84  DIODES  AND  4 MDMS.  THESE  ITEMS 
ARE  ASSESSED  UNDER  MDAC  ID  6152  THROUGH  6160. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT.  9 AND  10.  MAJOR 

HARDWARE  ASSOCIATED  WITH  THIS  CIRCUITRY  IS  THE  LH2  PREVALVES  (3), 
MC2 8 4 -03 9 6-000 6,  AND  THEIR  ASSOCIATED  OPENING  AND  CLOSING 
SOLENOIDS  (6),  MC284-0404-0021. 


REPORT  DATE  01/16/87 


C-639 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/29/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  6152 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  FUSE 

FAILURE  MODE:  FAIL  OPEN 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVES  (PV4,  PV5,  PV6) 

4)  PREVALVE  CONTROL  SOLENOIDS  (LV18,  LV19,  LV20,  LV21,  LV22, 
LV23 ) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  1A  FUSES  (9) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  ME451-0018-0100:  32V73A4F25  THRU  F33 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  MAY  CAUSE  PREVALVE  TO  CLOSE  DURING  POWERED 
FLIGHT,  RESULTING  IN  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT.  9 AND  10. 


REPORT  DATE  01/16/87 


C-640 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/29/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6153 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  TOGGLE  SWITCH 

FAILURE  MODE:  FAIL  OPEN,  FAIL  CLOSED 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVES  (PV4,  PV5,  PV6) 

4)  PREVALVE  CONTROL  SOLENOIDS  (LV18,  LV19,  LV20,  LV21,  LV22, 
LV23) 


5) 

PANEL  R4  (SWITCH 

LOCATION) 

6) 

TOGGLE  SWITCH  (3) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FWD  FLIGHT  DECK,  PANEL  R4 

PART  NUMBER:  ME452-0102-7354 : 32V73A4514,  515,  516 


CAUSES:  VIBRATION,  CONTAMINATION,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  CAUSE  PREVALVE  TO  CLOSE  DURING 
ENGINE  BURN,  RESULTING  IN  ENGINE  EXPLOSION  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT.  9 AND  10. 


REPORT  DATE  01/16/87 


C-641 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/29/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  6154 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  REMOTE  POWER  CONTROLLER,  3 A 

FAILURE  MODE:  FAIL  OPEN,  FAIL  SHORTED,  INADVERTENT  OUTPUT 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVES  (PV4,  PV5,  PV6) 

4)  PREVALVE  CONTROL  SOLENOIDS  (LV18,  LV19,  LV20,  LV21,  LV22, 
LV23) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  AVBAY  4,5,6 

7)  AFT  PC  A -4, -5,-6 

8)  REMOTE  POWER  CONTROLLERS,  3 A (12) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC450-0017-1030:  54V76A134RPC35,36,39,40, 

55V7  6A13  5RPC35, 36, 39, 40,  56V76A136RPC35,36,39,40 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  CAUSE  PREVALVE  TO  CLOSE  DURING 
ENGINE  BURN,  RESULTING  IN  ENGINE  EXPLOSION  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT.  9 AND  10. 


REPORT  DATE  01/16/87 


C-642 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/29/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  3/1R 

MDAC  ID:  6155  ABORT:  3/1R 

ITEM:  HYBRID  DRIVER  CONTROLLER,  TYPE  I (6) 

FAILURE  MODE:  FAIL  OPEN,  FAIL  SHORTED 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVES  (PV4,  PV5,  PV6) 

4)  PREVALVE  CONTROL  SOLENOIDS  (LV18,  LV19,  LV20,  LV21,  LV22, 
LV23) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  AVBAY  4,5,6 

7)  AFT  LCA  -1,-2, -3 

8)  HYBRID  DRIVER  CONTROLLER,  TYPE  I (6) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC477-0261-0002:  54V76A121AR(2) , 55V76A122AR(2) , 

55V76A123AR(2) 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  CAUSE  PREVALVE  TO  CLOSE  DURING 
ENGINE  BURN,  RESULTING  IN  ENGINE  EXPLOSION  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT.  9 AND  10. 


REPORT  DATE  01/16/87 


C-643 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/29/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6156 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  HYBRID  DRIVER  CONTROLLER,  TYPE  III  (12) 

FAILURE  MODE:  FAIL  OPEN,  FAIL  SHORTED 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVES  (PV4,  PV5,  PV6) 

4)  PREVALVE  CONTROL  SOLENOIDS  (LV18,  LV19,  LV20,  LV21,  LV22, 
LV23) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  AVBAY  4,5,6 

7 ) AFT  LCA  — — 3 

8)  HYBRID  DRIVER  CONTROLLERS,  TYPE  III  (12) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  MC477-0261-0002:  54V76A121AR(4) , 55V76A122AR(4)  , 

55V7  6A12  3 AR ( 4 ) 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  CAUSE  PREVALVE  TO  CLOSE  DURING 
ENGINE  BURN,  RESULTING  IN  ENGINE  EXPLOSION  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT.  9 AND  10. 


REPORT  DATE  01/16/87 


C-644 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/29/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  3/1R 

MDAC  ID:  6157  ABORT:  3/1R 

ITEM:  ISOLATION  DIODES,  12A  (18) 

FAILURE  MODE:  FAIL  OPEN 

LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVES  (PV4,  PV5,  PV6) 

4)  PREVALVE  CONTROL  SOLENOIDS  (LV18,  LV19,  LV20,  LV21,  LV22, 
LV23) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  AVBAY  4,5,6 

7)  AFT  PCA  -4, -5, -6 

8)  ISOLATION  DIODES,  12A  (18) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B ( F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  JANTX1N1204RA:  54V76A134A4CR25  THRU  28,31,32, 

55V76A135A4CR25  THRU  28,31,32,  56V76A136A4CR25  THRU  28,31,32 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  CAUSE  PREVALVE  TO  CLOSE  DURING 
ENGINE  BURN,  RESULTING  IN  ENGINE  EXPLOSION  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT.  9 AND  10. 


REPORT  DATE  01/16/87 


C-645 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/29/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6158 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  ISOLATION  DIODES,  4. 2 A (3) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNI COLL/EMMONS  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVES  (PV4,  PV5,  PV6) 

4)  PREVALVE  CONTROL  SOLENOIDS  (LV18,  LV19,  LV20,  LV21,  LV22, 
LV23 ) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  AVBAY  4,5,6 

7)  AFT  PCA  -4, -5, -6 

8)  AFT  LCA  -1,-2, -3 

9)  ISOLATION  DIODES,  4. 2 A (30) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  JANTXV1N4246:  54V76A134A1CR11, 12, 15, 16, 18 , 

54V7 6A13 4A2CR11, 12,15,16,18,  55V76A135A1CR11,12,15,16,18, 
55V7 6A13 5A2CR11, 12,15,16,18,  56V76A136A1CR11, 12, 15, 16, 18 , 
56V76A136A2CR11 ,12,15,16,18 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  CAUSE  PREVALVE  TO  CLOSE  DURING 
ENGINE  BURN,  RESULTING  IN  ENGINE  EXPLOSION  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT.  9 AND  10. 


REPORT  DATE  01/16/87 


C-646 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/29/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6159 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  ISOLATION  DIODE  (36) 

FAILURE  MODE:  FAIL  OPEN 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVES  (PV4,  PV5,  PV6) 

4)  PREVALVE  CONTROL  SOLENOIDS  (LV18,  LV19,  LV20,  LV21,  LV22, 
LV23 ) 


5) 

PANEL  R4  (SWITCH 

LOCATION) 

6) 

AVBAY  4,5,6 

7) 

AFT  PCA  -4, -5, -6 

8) 

AFT  LCA  -1,-2, -3 

9) 

ISOLATION  DIODES 

(36) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  54V76A121AXXXXX(12) , 55V76A122AXXXXX(12) , 

5 6V7 6A12 3 AXXXXX ( 12 ) 

CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  CAUSE  PREVALVE  TO  CLOSE  DURING 
ENGINE  BURN,  RESULTING  IN  ENGINE  EXPLOSION  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT.  9 AND  10. 


REPORT  DATE  01/16/87 


C-647 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/29/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  6160 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/1R 

ABORT:  2/1R 


ITEM:  MODULATOR  DEMODULATOR  (4) 

FAILURE  MODE:  FAIL  OPEN,  FAIL  SHORTED,  ERRONEOUS  OUTPUT 


LEAD  ANALYST:  MCNICOLL/EMMONS  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  LH2  PROPELLANT  FEED  SYSTEM 

3)  LH2  PREVALVES  (PV4,  PV5,  PV6) 

4)  PREVALVE  CONTROL  SOLENOIDS  (LV18,  LV19,  LV20,  LV21,  LV22, 
LV23 ) 

5)  PANEL  R4  (SWITCH  LOCATION) 

6)  AVBAY  4,5,6 

7)  MDM  FA1,  FA2,  FA3 , FA4 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  54V72A7,  55V72A8,  56V72A9,  56V72A10 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

SECOND  FAILURE  COULD  CAUSE  PREVALVE  TO  CLOSE  DURING  ENGINE  BURN, 
RESULTING  IN  ENGINE  EXPLOSION  AND  LOSS  OF  VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT.  9 AND  10. 


REPORT  DATE  01/16/87 


C-648 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/17/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7100 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  VALVE  POWER  & CONTROL  CIRCUITS  FOR  HELIUM 

ISOLATION  VALVES 

FAILURE  MODE:  OPEN,  SHORTED,  INADVERTENT  OPERATION 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A. J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  ISOLATION  VALVES,  REG  PNL  A,B  (LV  1,2;  3,4;  5,6) 

4)  PANEL  R2  (SWITCH  LOCATION) 

5)  AVBAY  4,5,6 

6)  AFT  LCA  1,2,3 

7)  AFT  PCA  4,5,6 

8)  VALVE  POWER  & CONTROL  CIRCUITS 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B (NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCED  ON  THIS  SHEET  WILL  NOT  EFFECT  CREW, 
VEHICLE,  OR  MISSION.  ALL  ARE  CRITICALITY  3.  ELECTRICAL  ITEMS 
INCLUDED  ARE  39  RESISTORS,  18  DIODES,  AND  6 REMOTE  POWER 
CONTROLLERS.  ELECTRICAL  ITEMS  WITH  A CRITICALITY  OTHER  THAN  3 
ARE  LISTED  SEPARATELY  UNDER  MDAC  ID  7110  THROUGH  7180. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19.  MAJOR 

HARDWARE  ASSOCIATED  WITH  THIS  CIRCUITRY  ARE  THE  SSME  HELIUM 
ISOLATION  VALVES (6),  ME284-0403-0017 (0007) . 


REPORT  DATE  01/16/87 


C-649 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/18/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  3/2R 

MDAC  ID:  7110  ABORT:  3/1R 

ITEM:  FUSE,  LAMP  (9) 

FAILURE  MODE:  OPEN,  FAILS  TO  CONDUCT 

LEAD  ANALYST:  EMMONS/ M CNEE LY  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  SUPPLY  ISOL  VALVE  A,B  (LV  1,2?  3,4?  5,6) 

4)  AV  BAY  4,5,6 

5)  ALCA  1,2,3 

6)  APCA  4,5,6 

7)  PANEL  R2 

8)  FUSE  (F  76,61,62?  27,25,26?  59,57,58) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C ( P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME451-0010-0100 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  THERMAL  SHOCK, 

CONTAMINATION 

EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  OR  REMAIN  OPEN  IS  EASILY  RECOGNIZABLE.  SHOULD 
THE  VALVE  FAIL  TO  REMAIN  OPEN  DURING  ENGINE  OPERATION  A REDUNDANT 
SUPPLY  ROUTE  IS  AVAILABLE,  BUT  ONLY  ONE  FAILURE  AWAY  FROM  LOSS  OF 
AN  ENGINE  FROM  LOSS  OF  HELIUM  (MISSION  FAILURE).  DURING 
ABORTS,  SHOULD  THIS  SCENARIO  OCCUR,  LOSS  OF  THE  2ND  ENGINE  (SEE 
MPS  GRs)  RESULTS  IN  LOSS  OF  VEHICLE  AND  CREW. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,  18,  19. 


REPORT  DATE  01/16/87 


C-650 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/18/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7120 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  TOGGLE  SWITCH,  1P3T  (3) 

FAILURE  MODE:  OPEN,  FAILS  TO  TRANSFER,  SHORTED 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

ENGINE  HELIUM 

SYSTEM 

3) 

HELIUM  SUPPLY 

ISOLATION  'A'  VALVES 

(LV  1, 

3,5) 

4) 

AV  BAY  4,5,6 

5) 

ALCA  1,2,3 

6) 

PANEL  R2 

7) 

TOGGLE  SWITCH 

(S  55,56,57) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC  ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A[2]  B[F]  C[P] 


LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7103 

CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  CONTAMINATION,  PIECE  PART 

STRUCTURAL  FAILURE. 


EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  OR  REMAIN  OPEN  IS  EASILY  RECOGNIZABLE.  SHOULD 
THE  VALVE  FAIL  TO  REMAIN  OPEN  DURING  ENGINE  OPERATION  A REDUNDANT 
SUPPLY  ROUTE  IS  AVAILABLE,  BUT  ONLY  ONE  FAILURE  AWAY  FROM  LOSS  OF 
AN  ENGINE  FROM  LOSS  OF  HELIUM  (MISSION  FAILURE).  DURING 
ABORTS,  SHOULD  THIS  SCENARIO  OCCUR,  LOSS  OF  THE  2ND  ENGINE  (SEE 
MPS  GRs)  RESULTS  IN  LOSS  OF  VEHICLE  AND  CREW. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,  18,  19. 


REPORT  DATE  01/16/87 


C-651 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/18/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7130 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  TOGGLE  SWITCH,  2P3T  (3) 

FAILURE  MODE:  OPEN,  FAILS  TO  TRANSFER,  SHORTED 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  SUPPLY  ISOLATION  'B'  VALVES  (LV  2,4,6) 

4)  AV  BAY  4,5,6 

5)  ALCA  1,2,3 

6)  APCA  4,5,6 

7)  PANEL  R2 

8)  TOGGLE  SWITCH  (S  12,13,14) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  UNKNOWN 

CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  CONTAMINATION,  PIECE  PART 

STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  OR  REMAIN  OPEN  IS  EASILY  RECOGNIZABLE.  SHOULD 
THE  VALVE  FAIL  TO  REMAIN  OPEN  DURING  ENGINE  OPERATION  A REDUNDANT 
SUPPLY  ROUTE  IS  AVAILABLE,  BUT  ONLY  ONE  FAILURE  AWAY  FROM  LOSS  OF 
AN  ENGINE  FROM  LOSS  OF  HELIUM  (MISSION  FAILURE).  DURING 
ABORTS,  SHOULD  THIS  SCENARIO  OCCUR,  LOSS  OF  THE  2ND  ENGINE  (SEE 
MPS  GRs)  RESULTS  IN  LOSS  OF  VEHICLE  AND  CREW. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19. 


REPORT  DATE  01/16/87 


C-652 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/18/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7140 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/1R 


ITEM:  HYBRID  DRIVER,  TYPE  III  (3) 

FAILURE  MODE:  OPEN,  CLOSE,  INADVERTENT  OPERATION 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  SUPPLY  ISOLATION  VALVES  'A'  (LV  1,3,5) 

4)  AV  BAY  4,5,6 

5)  ALCA  1,2,3 

6)  HYBRID  DRIVER  (AR  #S  UNKNOWN) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  LCA  1,2,3 

PART  NUMBER:  ME477-0263-0002 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  THERMAL  SHOCK, 

CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  OR  REMAIN  OPEN  IS  EASILY  RECOGNIZABLE.  SHOULD 
THE  VALVE  FAIL  TO  REMAIN  OPEN  DURING  ENGINE  OPERATION  A REDUNDANT 
SUPPLY  ROUTE  IS  AVAILABLE,  BUT  ONLY  ONE  FAILURE  AWAY  FROM  LOSS  OF 
AN  ENGINE  FROM  LOSS  OF  HELIUM  (MISSION  FAILURE).  DURING 
ABORTS,  SHOULD  THIS  SCENARIO  OCCUR,  LOSS  OF  THE  2ND  ENGINE  (SEE 
MPS  GRs)  RESULTS  IN  LOSS  OF  VEHICLE  AND  CREW. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19. 


REPORT  DATE  01/16/87 


C-653 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/18/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7150 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  HYBRID  DRIVER,  TYPE  I (6) 

FAILURE  MODE:  OPEN,  CLOSE,  INADVERTENT  OPERATION 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  SUPPLY  ISOLATION  VALVES  'B'  (LV  2,4,6) 

4)  AV  BAY  4,5,6 

5)  ALCA  2,3,1 

6)  APCA  6,4,5 

7)  HYBRID  DRIVER  (AR  #s  UNKNOWN) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ P ] 

LOCATION:  AFT  LCA  2,3,1 

PART  NUMBER:  ME477-0261-0002 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  THERMAL  SHOCK, 

CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  OR  REMAIN  OPEN  IS  EASILY  RECOGNIZABLE.  SHOULD 
THE  VALVE  FAIL  TO  REMAIN  OPEN  DURING  ENGINE  OPERATION  A REDUNDANT 
SUPPLY  ROUTE  IS  AVAILABLE,  BUT  ONLY  ONE  FAILURE  AWAY  FROM  LOSS  OF 
AN  ENGINE  FROM  LOSS  OF  HELIUM  (MISSION  FAILURE).  DURING 
ABORTS,  SHOULD  THIS  SCENARIO  OCCUR,  LOSS  OF  THE  2ND  ENGINE  (SEE 
MPS  GRs)  RESULTS  IN  LOSS  OF  VEHICLE  AND  CREW. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19. 


REPORT  DATE  01/16/87 


C-654 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/2R 
3/1R 

ITEM:  ISOLATION  DIODES  (6) 

FAILURE  MODE:  SHORTED,  OPEN 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

EPDC/MPS 

7160 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  SUPPLY  ISOLATION  VALVES  'B'  (LV  2,4,6) 

4)  AV  BAY  4,5,6 

5)  APCA  5,6,4 

6)  ISOLATION  DIODES  (A4CR23,  A4CR24) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C ( P ] 

LOCATION:  AFT  PCA  5/6;  6/4;  4/5 

PART  NUMBER:  JANTX1N12  04RA 


CAUSES:  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  TO  OPEN  OR  REMAIN  OPEN  IS  EASILY  RECOGNIZABLE.  SHOULD 
THE  VALVE  FAIL  TO  REMAIN  OPEN  DURING  ENGINE  OPERATION  A REDUNDANT 
SUPPLY  ROUTE  IS  AVAILABLE,  BUT  ONLY  ONE  FAILURE  AWAY  FROM  LOSS  OF 
AN  ENGINE  FROM  LOSS  OF  HELIUM  (MISSION  FAILURE).  DURING 
ABORTS,  SHOULD  THIS  SCENARIO  OCCUR,  LOSS  OF  THE  2ND  ENGINE  (SEE 
MPS  GRs)  RESULTS  IN  LOSS  OF  VEHICLE  AND  CREW. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19. 


REPORT  DATE  01/16/87 


C-655 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


2/05/87 

EPDC/MPS 

7170 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/1R 


ITEM:  ISOLATION  DIODES  (9) 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  EMMONS/MCNEELY 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  SUPPLY  ISOLATION  VALVES  (LV1,2;3,4;5, 6) 

4)  AV  BAY  4,5,6 

5)  APCA  4,5,6 

6)  ISOLATION  DIODES  (A3CR3,  A1CR4 , -3  EACH) 

7)  ALCA  1,2,3 

8)  ISOLATION  DIODES  (#  UNKNOWN-3) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  PCA  4,5,6;  AFT  LCA  1,2,3 

PART  NUMBER:  JANTXV1N4246 


CAUSES:  VIBRATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

THESE  DIODES  ARE  INLINE  DEVICES  TO  THE  SWITCHES  CONTROLLING  EACH 
OF  THE  ISOLATION  VALVES.  LOSS  OF  ALL  REDUNDANCY  DURING  POWERED 
FLIGHT  MAY  RESULT  IN  LOSS  OF  MISSION  AND  IN  THE  ABORT  CASES  MAY 
RESULT  IN  LOSS  OF  VEHICLE  OR  CREW  DUE  TO  LOSS  OF  HELIUM  PURGE 
TO  AN  ENGINE. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19. 


REPORT  DATE  01/16/87 


C-656 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  2/05/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7180 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  ISOLATION  DIODES  (3) 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  EMMONS/ MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  SUPPLY  ISOLATION  VALVES,  REG  PNL  A (LV1,3,5) 

4)  AV  BAY 

5)  ALCA  1,2,3 

6)  ISOLATION  DIODES  (AR  # UNKNOWN) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY  SCREENS:  A[2]  B[F]  C[P] 

LOCATION:  AFT  LCAs  1,2,3 

PART  NUMBER:  JANTXY1N4246 


CAUSES:  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THESE  DIODES  ARE  IN  SERIES  WITH  THE  OUTPUT  OF  MDM  CHANNELS 
SUPPLYING  REDUNDANT  SIGNALS  TO  THE  HELIUM  ISOL  VALVES  'A'. 
COMMANDS  THRU  THE  MDM'S  ARE  TERMINATED  AT  MECO.  LOSS  OF  ALL 
REDUNDANCY  DURING  POWERED  FLIGHT  MAY  RESULT  IN  LOSS  OF  MISSION  OR 
POSSIBLE  LOSS  OF  VEHICLE  OR  CREW  DURING  ABORT  CASES. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19. 


REPORT  DATE  01/16/87 


C-657 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/26/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7190 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  MDM,  FLIGHT  AFT  1,2, 3, 4 

FAILURE  MODE:  FAILS  OPEN,  ERRONEOUS  OUTPUT  (OFF) 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  ISOLATION  VALVES,  REG  PNL  A,B  (LV1, 2;3 , 4 ;5, 6) 

4)  AV  BAY  4,5,6 

5)  MDM  FA  1,2, 3, 4 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AVIONICS  BAYS  4,5,6 

PART  NUMBER:  MC615-0004-6110, 5110 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

DURING  POWERED  FLIGHT  THE  ISOL  VALVES  ARE  COMMANDED  ON  THRU  THE 
MDM  AS  WELL  AS  FROM  PANEL  R2.  FAILURE  TO  OUTPUT  HAS  NO  EFFECT 
UNLESS  ACCOMPANIED  BY  OTHER  FAILURES. 


REFERENCES:  RI  DWG  VS72-941102  SHT.  17,18,19  AND  BOOSTER  SYSTEMS 

BRIEFS,  JSC  19401,  l-OCT-1984. 


REPORT  DATE  01/16/87 


C-658 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7191 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  MDMf  FLIGHT  AFT  1,2, 3, 4 

FAILURE  MODE:  FAILS  SHORTED,  ERRONEOUS  OUTPUT  (ON) 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  ISOLATION  VALVES,  REG  PNL  A,B  (LV1, 2 ;3, 4 ;5, 6) 

4)  AV  BAY  4,5,6 

5)  MDM  FA  1,2, 3, 4 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AVIONICS  BAYS  4,5,6 

PART  NUMBER:  MC615-0004-6110, 5110 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

DURING  POWERED  FLIGHT  THE  ISOL  VALVES  ARE  COMMANDED  ON  THRU  THE 
MDM'S  AS  WELL  AS  FROM  PANEL  R2.  FAILING  ON  DURING  THIS  PERIOD  OR 
AFTER  MECO  HAS  NO  EFFECT.  FAILING  ON  DURING  RTLS  OR  TAL  ABORTS 
HAS  NO  EFFECT  SINCE  THE  'B'  VALVE  OF  THE  LEFT  ENGINE  (LV4) 

IS  REQUIRED  TO  BE  OPEN  FOR  PURGE  OF  THE  AFT  COMPARTMENT  WHILE 
ENGINE  PNEUMATIC  PACKAGE  PRESSURE  ACTUATED  VALVES  PREVENT 
OVERBOARD  LOSS  OF  HELIUM  THRU  THE  ENGINES.  FAILING  ON  HAS  NO 
EFFECT  DURING  NORMAL  ENTRIES  AS  ISOL  VALVES  (LV  1,2, 3, 5, 6)  ARE 
PLACED  IN  THE  CLOSED  POSITION  (CREW)  BLOCKING  ERRONEOUS  MDM 
OUTPUTS. 


REFERENCES:  RI  DWG  VS72-941102  SHT.  17,18,19  AND  BOOSTER  SYSTEMS 

BRIEFS,  JSC  19401,  l-OCT-1984. 


REPORT  DATE  01/16/87 


C-659 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/17/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7200 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  VALVE  POWER  AND  CONTROL  CIRCUITS  FOR  HELIUM 

INTERCONNECT  INLET  VALVES 

FAILURE  MODE:  OPEN,  SHORTED,  INADVERTENT  OPERATION 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  INLET  VALVES  (LV  59,61,63) 

4)  PANEL  R2  (SWITCH  LOCATION) 

5)  AV  BAY  4,5,6 

6)  MPCA  1,2,3 

7)  VALVE  POWER  AND  CONTROL  CIRCUITS 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/3  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] B [NA  ] 


C [NA  ] 


LOCATION:  SEE  REFERENCE 

PART  NUMBER:  SEE  REFERENCE 

CAUSES:  VIBRATION,  CONTAMINATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK 


EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCED  ON  THIS  SHEET  WILL  NOT  EFFECT  CREW, 
VEHICLE  OR  MISSION.  ALL  ARE  CRITICALITY  3.  ELECTRICAL  ITEMS 
INCLUDED  WITHIN  THIS  SHEET  ARE  33  RESISTORS,  12  ISOLATION  DIODES, 
6 REMOTE  POWER  CONTROLLERS  AND  9 HYBRID  DRIVERS.  FAILURE 
MODES  FOR  COMPONENTS  WITH  A CRITICALITY  OTHER  THAN  3 ARE  LISTED 
SEPARATELY  UNDER  MDAC  ID  7210  THROUGH  7260. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19.  MAJOR 

HARDWARE  ASSOCIATED  WITH  THIS  CIRCUITRY  ARE  THE  SSME  HARDWARE 
HELIUM  INTERCONNECT  INLET  VALVES  (6).  ME284-0403-0017 (0007) . 


REPORT  DATE  01/16/87 


C-660 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/19/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7210 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  FUSE,  LAMP  (6) 

FAILURE  MODE:  OPEN,  FAILS  TO  CONDUCT 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  INLET  VALVES  (LV  59,61,63) 

4)  AV  BAY  4,5,6 

5)  MPCA  1,2,3 

6)  FUSE  (F  73,74,75,28,29,30) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME451-0018-0100 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  THERMAL  SHOCK, 

CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT  UNLESS  IT  BECOMES  NECESSARY  TO  SUPPLY 
PNEUMATIC  HELIUM  TO  AN  ENGINE  HELIUM  PURGE  SYSTEM.  THE  LEFT 
ENGINE  INTERCONNECT  INLET  VALVE  (LV61)  IS  ALSO  CRITICAL  TO  AFT 
COMPARTMENT  PURGES  DURING  RTLS  AND  TAL  ABORT  LANDING  PHASES. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,  18,  19. 


REPORT  DATE  01/16/87 


C-661 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/19/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7220 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/2R 

1/1R 


ITEM:  TOGGLE  SWITCH,  2P3T  (3) 

FAILURE  MODE:  OPEN,  FAILS  TO  TRANSFER,  SHORTED 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  INLET  VALVES  (LV  59,61,63) 

4)  AV  BAY  4,5,6 

5)  ALCA  1,2,3 

6)  MPCA  1,2,3 

7)  PANEL  R2 

8)  TOGGLE  SWITCH  (S  9,10,11) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

1/1R 

LIFTOFF: 

2/2R 

TAL: 

1/1R 

ONORBIT: 

3/3 

AO  A: 

1/1R 

DEORBIT: 

3/3 

ATO: 

1/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  FLIGHT  STATION 

PART  NUMBER:  ME452-0102-7203 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  CONTAMINATION,  PIECE  PART 

STRUCTURAL  FAILURE 


EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT  UNLESS  IT  BECOMES  NECESSARY  TO  SUPPLY 
PNEUMATIC  HELIUM  TO  AN  ENGINE  HELIUM  PURGE  SYSTEM.  THE  LEFT 
ENGINE  INTERCONNECT  INLET  VALVE  (LV61)  IS  ALSO  CRITICAL  TO  AFT 
COMPARTMENT  PURGES  DURING  RTLS  AND  TAL  ABORT  LANDING  PHASES. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,  18,  19. 


REPORT  DATE  01/16/87 


C-662 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/19/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7230 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

2/1R 


ITEM:  ISOLATION  DIODES  (6) 

FAILURE  MODE:  OPEN 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  INLET  VALVES  (LV  59,61,63) 

4)  AV  BAY  4,5,6 

5)  MPCA  1,2,3 

6)  ISOLATION  DIODES  (A2CR12,15;  14,A4CR9;  10,5) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/2R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO  A: 

2/1R 

DEORBIT: 

3/3 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  MID  PCA  1/2;  2/3;  3/1 

PART  NUMBER:  JANTX1N1188RA  (35A,  A2CR12) ; JANTX1N1204RA  (12A, 

ALL  OTHERS) 

CAUSES:  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT  UNLESS  IT  BECOMES  NECESSARY  TO  SUPPLY 
PNEUMATIC  HELIUM  TO  AN  ENGINE  HELIUM  PURGE  SYSTEM.  THE  LEFT 
ENGINE  INTERCONNECT  INLET  VALVE  (LV61)  IS  ALSO  CRITICAL  TO  AFT 
COMPARTMENT  PURGES  DURING  RTLS  AND  TAL  ABORT  LANDING  PHASES. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,  18,  19. 


REPORT  DATE  01/16/87 


C-663 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
2/1R 
1/1R 

ITEM:  ISOLATION  DIODES  (6) 

FAILURE  MODE:  SHORTED 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

EPDC/MPS 

7231 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J. MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  INLET  VALVES  (LV  59,61,63) 

4)  AV  BAY  4,5,6 

5)  MPCA  1,2,3 

6)  ISOLATION  DIODES  (A2CR12,15;  14,A4CR9;  10,5) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1R 

LIFTOFF: 

2/1R 

TAL: 

1/1R 

ONORBIT: 

3/3 

AOA: 

1/1R 

DEORBIT: 

3/3 

ATO: 

1/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  MID  PCA  1/2?  2/3?  3/1 

PART  NUMBER: 


CAUSES:  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT  UNLESS  IT  BECOMES  NECESSARY  TO  SUPPLY 
PNEUMATIC  HELIUM  TO  AN  ENGINE  HELIUM  PURGE  SYSTEM.  THE  LEFT 
ENGINE  INTERCONNECT  INLET  VALVE  (LV61)  IS  ALSO  CRITICAL  TO  AFT 
COMPARTMENT  PURGES  DURING  RTLS  AND  TAL  ABORT  LANDING  PHASES. 

AN  INCREASE  IN  MAIN  BUS  VOLTAGE,  IN  THE  REDUNDANT  CIRCUIT,  ABOVE 
THE  FAILED  CIRCUIT  BUS  VOLTAGE  WILL  RESULT  IN  REVERSE  CURRENT 
THRU  THE  SHORTED  DIODE  AND  RPC.  THIS  WILL  CAUSE  THE  REDUNDANT 
RPC  TO  TURN  OFF  DUE  TO  CURRENT  OVERLOAD.  AS  A RESULT,  THE 
HIGHER  CRITICALITY  IS  ASSIGNED  TO  ABORT  CASES. 

REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,  18,  19. 


REPORT  DATE  01/16/87 


C-664 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/19/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7240 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/1R 


ITEM:  REMOTE  POWER  CONTROLLER  (6) 

FAILURE  MODE:  LOSS  OF  OUTPUT 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  INLET  VALVES  (LV  59,61,63) 

4)  AV  BAY  4,5,6 

5)  MPCA  1,2,3 

6)  RPCA  (39,37;  38,33;  38,34) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ) 

B [ P ] 

c [ p ] 

LOCATION:  MID  PCA  1/2;  2/3;  1/3 

PART  NUMBER:  MC450-0017-1050 


CAUSES:  VIBRATION,  THERMAL  SHOCK,  CONTAMINATION,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT  UNLESS  IT  BECOMES  NECESSARY  TO  SUPPLY 
PNEUMATIC  HELIUM  TO  AN  ENGINE  HELIUM  PURGE  SYSTEM.  THE  LEFT 
ENGINE  INTERCONNECT  INLET  VALVE  (LV61)  IS  ALSO  CRITICAL  TO  AFT 
COMPARTMENT  PURGES  DURING  RTLS  AND  TAL  ABORT  LANDING  PHASES. 


REFERENCES: 


RI  DRAWING  VS72-941102  SHT.  17,  18,  19. 


REPORT  DATE  01/16/87 


C-665 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/2R 
3/1R 

ITEM:  HYBRID  DRIVER,  TYPE  I (6) 

FAILURE  MODE:  LOSS  OF  OUTPUT 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/22/86 

EPDC/MPS 

7250 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  INLET  VALVES  (LV  59,61,63) 

4)  AV  BAY  4,5,6 

5)  MPCA  1,2,3 

6)  HYBRID  DRIVERS  (AR  51,41;  42,31;  32,50) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ p ] 

C [ P ] 

LOCATION:  MID  PCA  1/2;  2/3;  3/1 

PART  NUMBER:  ME477-0261-0002 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  THERMAL  SHOCK, 

CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  HAS  NO  EFFECT  UNLESS  IT  BECOMES  NECESSARY  TO  SUPPLY 
PNEUMATIC  HELIUM  TO  AN  ENGINE  HELIUM  PURGE  SYSTEM.  THE  LEFT 
ENGINE  INTERCONNECT  INLET  VALVE  (LV61)  IS  ALSO  CRITICAL  TO  AFT 
COMPARTMENT  PURGES  DURING  RTLS  AND  TAL  ABORT  LANDING  PHASES. 


REFERENCES: 


RI  DRAWING  VS72-941102  SHT.  17,  18,  19. 


REPORT  DATE  01/16/87 


C-666 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  2/05/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7260 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/1R 


ITEM:  ISOLATION  DIODES  (12) 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  INLET  VALVES  (LV  59,61,63) 

4)  AV  BAY  4,5,6 

5)  MPCA  1,2,3 

6)  ISOLATION  DIODES  (A6CR3,4,5,6  - 1 EACH,  A5CR3,4,5,6  - 2 
EACH) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/2R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  MID  PCA  1,2,3 

PART  NUMBER:  JANTXV1N4246 


CAUSES:  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

THESE  DIODES  ARE  INSTALLED  IN  SERIES  WITH  THE  OUTPUT  OF  MDM 
CHANNELS  SUPPLYING  REDUNDANT  SIGNALS  TO  THE  INTERCONNECT  INLET 
VALVES.  COMMANDS  THRU  THE  MDM'S  ARE  TERMINATED  AT  MECO.  LOSS  OF 
ALL  REDUNDANCY  DURING  POWERED  FLIGHT  MAY  RESULT  IN  LOSS  OF 
MISSION  OR  LOSS  OF  VEHICLE  OR  CREW  DURING  ABORT  CASES. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,  18,  19. 


REPORT  DATE  01/16/87 


C-667 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/29/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  7270 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/1R 


ITEM:  MDM,  FLIGHT  AFT  1,2,3 

FAILURE  MODE:  FAILS  OPEN,  ERRONEOUS  OUTPUT  (OFF) 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  INLET  VALVES  (LV  59,61,63) 

4)  AV  BAY  4,5,6 

5)  MDM  FA  1,2,4 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AVIONICS  BAY  4,5,6 

PART  NUMBER:  MC615-0004-6110,5110 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 


EFFECTS/RATIONALE : 

FAILURE  TO  OUTPUT  HAS  NO  EFFECT  DURING  POWERED  FLIGHT  AS  THE 
INLET  VALVES  ASSOCIATED  WITH  THESE  MDM'S  ARE  NOT  OPENED  DURING 
THIS  PERIOD.  FAILURE  TO  OUTPUT  DURING  AN  RTLS  OR  TAL  ABORTS  MAY 
SEVERELY  LIMIT  THE  QUANTITY  OF  HELIUM  AVAILABLE  FOR  THE  AFT 
COMPARTMENT  PURGE.  THIS  PURGE  HAS  BEEN  IDENTIFIED  AS  MANDATORY 
TO  PREVENT  HYDROGEN  ACCUMULATION  AND  POSSIBLE  EXPLOSION  DURING 
THE  LANDING  PHASE  OF  THESE  ABORTS.  NOTE:  THE  CRITICALITY  APPLIES 
TO  THE  MDM'S  (FA  2,3,)  SUPPORTING  THE  LEFT  ENGINE 
INTERCONNECT  INLET  VALVE  ONLY  (LV61).  ALL  OTHERS  ARE  CRIT  3. 

REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19. 


REPORT  DATE  01/16/87 


C-668 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/29/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  EPDC/MPS  FLIGHT:  3/3 

MDAC  ID:  7271  ABORT:  3/3 

ITEM:  MDM,  FLIGHT  AFT  1,2,3 

FAILURE  MODE:  FAILS  SHORTED,  ERRONEOUS  OUTPUT  (ON) 

LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J.MARINO 

BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  INLET  VALVES  (LV  59,61,63) 

4)  AV  BAY  4,5,6 

5)  MDM  FA  1,2,4 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  AVIONICS  BAY  4,5,6 

PART  NUMBER:  MC615-0004-6110, 5110 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  THE  MDM  IN  THIS  MODE  HAS  NO  EFFECT  ON  LOSS  OF  HELIUM 
FROM  THE  SYSTEM.  HOWEVER,  UNEXPECTED  PRESSURE  VARIATIONS  MAY 
OCCUR  ACROSS  THE  SYSTEM. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19. 


REPORT  DATE  01/16/87 


C-669 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/17/86 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7300 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  VALVE  POWER  AND  CONTROL  CIRCUITS  FOR  HELIUM 

INTERCONNECT  OUTLET  VALVES 

FAILURE  MODE:  OPEN,  SHORTED,  INADVERTENT  OPERATION 


LEAD  ANALYST:  EMMONS/MCNEELY  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  ENGINE  HELIUM  SYSTEM 

3)  HELIUM  INTERCONNECT  OUTLET  VALVES  (LV  60,62,64) 

4)  AV  BAY  4,5,6 

5)  ALCA  1,2,3 

6)  VALVE  POWER  & CONTROL  CIRCUITS 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [NA  ] 


B [NA  ] C [NA  ] 


LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  THERMAL  SHOCK, 

CONTAMINATION,  PIECE  PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE: 

FAILURE  OF  ITEMS  REFERENCED  ON  THIS  SHEET  WILL  NOT  EFFECT  CREW, 
VEHICLE  OR  MISSION.  ALL  ARE  CRITICALITY  3.  ELECTRICAL  ITEMS 
INCLUDED  WITHIN  THIS  SHEET  ARE  12  RESISTORS,  9 ISOLATION  DIODES, 
3 HYBRID  DRIVERS,  3 SWITCHES,  AND  3 FUSES.  THE  3 FUSES  AND  3 
SWITCHES  ARE  COMMON  TO  THE  SINGLE  REDUNDANT  STRING  OF  THE  INLET 
VALVES  AND  ARE  ASSESSED  A CRITICALITY  OF  3 WITH  RESPECT  TO  THE 
OUTLET  VALVES,  BUT  NOT  THE  INLET  VALVES.  SEE  MDAC  ID  7 210  AND 
7220. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT.  17,18,19.  MAJOR 

HARDWARE  ASSOCIATED  WITH  THIS  CIRCUITRY  ARE  THE  SSME  HELIUM 
INTERCONNECT  OUTLET  VALVES  (6).  MC284-0403-0011(-0001) . 


REPORT  DATE  01/16/87 


C-670 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7400 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  PNEUMATIC  HELIUM  SUPPLY  ISOLATION  VALVE  POWER  AND 

CONTROL  CIRCUIT 

FAILURE  MODE:  OPEN,  SHORTED,  INADVERTENT  OPERATION 


LEAD  ANALYST:  W.J.  MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  PNEUMATIC  HELIUM  ISOLATION  VALVE,  REG  PNL  4 (LV7,LV8) 

4)  PANEL  R2  (SWITCH  LOCATION) 

5)  AVBAY  4,5,6 

6)  AFT  LCA  1,2 

7)  VALVE  POWER  & CONTROL  CIRCUITS 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK,  MECHANICAL 

SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCED  WILL  NOT  AFFECT  CREW,  VEHICLE  OR 
MISSION.  ELECTRICAL  ITEMS  INCLUDED  ARE  5 RESISTORS  AND  14 
DIODES . 


REFERENCES:  RI  DRAWING  VS72-941102  SHT  20.  MAJOR  HARDWARE 

ASSOCIATED  WITH  THIS  CIRCUITRY  ARE  THE  PNEUMATIC  HELIUM  ISOLATION 
VALVES  (2),  MC2  8 4 -04  03 -00 11. 


REPORT  DATE  01/16/87 


C-671 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  7420 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  POWER 

AND  CONTROL  CIRCUIT 

FAILURE  MODE:  FAILS  OPEN,  SHORTED,  OR  INADVERTENT  OPERATION 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  (LV10) 

4)  PANEL  R2  (SWITCH  LOCATION) 

5)  AV  BAY  6 

6)  AFT  LCA  3 

7)  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  CONTROL  CIRCUIT 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCED  WILL  NOT  AFFECT  CREW,  VEHICLE,  OR 
MISSION.  ELECTRICAL  ITEMS  INCLUDED  ARE  4 RESISTORS  AND  2 DIODES. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHT  18. 


REPORT  DATE  01/16/87 


C-672 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  7430 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/1R 


ITEM:  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  CONTROL 

CIRCUIT  SWITCH 

FAILURE  MODE:  FAIL  TO  OPEN,  FAIL  TO  CLOSE,  SHORTED  TO  GROUND 


LEAD  ANALYST:  W.J.  MCNICOLL  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  (LV10)  CONTROL 
CIRCUIT 

4)  TOGGLE  SWITCH  (PANEL  R2,S54) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FWD  FLIGHT  DECK 

PART  NUMBER:  ME452-0102-7103 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  OF  SWITCH  WILL  PREVENT  OPERATION  OF  CROSSOVER  VALVE.  NO 
EFFECT  ON  CREW  OR  VEHICLE  IN  NOMINAL  FLIGHT  BUT  LOSS  OF  CREW  OR 
VEHICLE  IN  ABORT  MODES,  DUE  TO  LOSS  OF  AFT  COMPARTMENT  PURGE. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT  18. 


REPORT  DATE  01/16/87 


C-673 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7440 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/1R 


ITEM:  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  CONTROL 

CIRCUIT  FUSE 

FAILURE  MODE:  FAILS  OPEN  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  W.J.  MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  (LV10)  CONTROL 
CIRCUIT 

4)  PANEL  R2  (SWITCH  LOCATION) 

5)  FUSE,  1A  (F76) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  FWD  FLIGHT  DECK 

PART  NUMBER:  ME451-0018-0100 


CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  FUSE  WILL  PREVENT  OPERATION  OF  CROSSOVER  VALVE.  NO 
EFFECT  ON  CREW  OR  VEHICLE  IN  NOMINAL  FLIGHT  BUT  LOSS  OF  LIFE  OR 
VEHICLE  IN  ABORT  MODES,  DUE  TO  LOSS  OF  AFT  COMPARTMENT  PURGE. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT  18. 


REPORT  DATE  01/16/87 


C-674 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7450 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/1R 


ITEM:  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  CONTROL 

CIRCUIT  ISOLATION  DIODES 

FAILURE  MODE:  FAILS  OPEN  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  W.J.  MCNICOLL  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  (LV10)  CONTROL 
CIRCUIT 

4)  PANEL  R2  (SWITCH  LOCATION) 

5)  AVBAY  6 

6)  AFT  LCA  3 

7)  ISOLATION  DIODES  (4) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  56V76A123CR 


CAUSES:  VIBRATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  ISOLATION  DIODES  WILL  PREVENT  OPERATION  OF  CROSSOVER 
VALVE.  NO  EFFECT  ON  CREW  OR  VEHICLE  IN  NOMINAL  FLIGHT,  BUT  LOSS 
OF  CREW  OR  VEHICLE  IN  ABORT  MODES,  DUE  TO  LOSS  OF  AFT  COMPARTMENT 
PURGE. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT  18. 


REPORT  DATE  01/16/87 


C-675 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  7460 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/1R 


ITEM:  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  CONTROL 

CIRCUIT  HYBRID  DRIVER  CONTROLLER 

FAILURE  MODE:  FAILS  OFF  (PREMATURE/ ERRONEOUS) 


LEAD  ANALYST:  W.J.  MCNICOLL  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  PNEUMATIC  HELIUM  CROSSOVER  SOLENOID  VALVE  (LV10)  CONTROL 
CIRCUIT 

4)  PANEL  R2  (SWITCH  LOCATION) 

5)  AVBAY  6 

6)  AFT  LCA  3 

7)  HYBRID  DRIVER  CONTROLLER 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  ME477-02 63-0002 


CAUSES:  VIBRATION,  THERMAL  SHOCK,  MECHANICAL  SHOCK 
EFFECTS/RATIONALE : 

FAILURE  OF  DRIVER  WILL  PREVENT  OPERATION  OF  CROSSOVER  VALVE.  NO 
EFFECT  ON  CREW  OR  VEHICLE  IN  NOMINAL  FLIGHT,  BUT  LOSS  OF  CREW  OR 
VEHICLE  IN  ABORT  MODES,  DUE  TO  LOSS  OF  AFT  COMPARTMENT  PURGE. 


REFERENCES:  RI  DRAWING  VS72-941102  SHT  18. 


REPORT  DATE  01/16/87 


C-676 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7470 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  HELIUM  SUPPLY  BLOWDOWN  VALVES  POWER  AND  CONTROL 

CIRCUIT 

FAILURE  MODE:  FAILS  OPEN,  SHORTED,  OR  INADVERTENT  OPERATION 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  PNEUMATIC  HELIUM  SUPPLY  BLOWDOWN  VALVES  (LV26,LV27) 

4)  AV  BAY  4 

5)  AFT  LCA  1 

6)  BLOWDOWN  VALVE  POWER  AND  CONTROL  CIRCUITS 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCED  WILL  NOT  AFFECT  CREW,  VEHICLE  OR 
MISSION.  ELECTRICAL  ITEMS  INCLUDED  ARE  2 RESISTORS  AND  2 DIODES. 


REFERENCES:  RI  DRAWING  VS 72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-677 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7480 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  HELIUM  SUPPLY  BLOWDOWN  VALVES  CONTROL  CIRCUIT 

HYBRID  DRIVER  CONTROLLER 

FAILURE  MODE:  FAILS  ON  (PREMATURE/ ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  PNEUMATIC  HELIUM  SUPPLY  BLOWDOWN  VALVES  (LV20,LV27) 

4)  AV  BAY  4 

5)  AFT  LCA  1 

6)  BLOWDOWN  VALVE  CONTROL  CIRCUIT  HYBRID  DRIVER  CONTROLLER 
(ARIII) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE  LAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO  A: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  54V76A121 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  DRIVER  ON  WILL  ALLOW  OFF  NOMINAL  OPENING  OF  BLOWDOWN 
VALVES  RESULTING  IN  LOSS  OF  HELIUM  AVAILABLE  FOR  L02  DUMP.  LOSS 
OF  L02  DUMP  RESULTS  IN  LOSS  OF  FLIGHT  CONTROL  AND  LOSS  OF 
LIFE/VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-678 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  7490 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  HELIUM  SUPPLY  BLOWDOWN  VALVES  CONTROL  CIRCUIT  MDM 

COMMANDS 

FAILURE  MODE:  FAILS  ON  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  PNEUMATIC  HELIUM  SUPPLY  BLOWDOWN  VALVES  (LV20,LV27) 

4)  AV  BAY  4 

5)  AFT  LCA  1 

6)  BLOWDOWN  VALVE  CONTROL  CIRCUIT  MDM  COMMANDS  (FA3,FA4) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  V41K1631N,  35N 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 


EFFECTS/RATIONALE : 

FAILURE  OF  MDM  COMMAND  ON  WILL  ALLOW  OFF  NOMINAL  OPENING  OF 
BLOWDOWN  VALVES  RESULTING  IN  LOSS  OF  HELIUM  AVAILABLE  FOR  L02 
DUMP.  LOSS  OF  L02  DUMP  RESULTS  IN  LOSS  OF  FLIGHT  CONTROL. 


REFERENCES:  RI  DRAWING  VS 72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-679 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  7500 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L02  MANIFOLD  REPRESS  VALVES  POWER  AND  CONTROL 

CIRCUIT 

FAILURE  MODE:  FAILS  OPEN,  SHORTED  OR  INADVERTENT  OPERATION 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  L02  MANIFOLD  REPRESS  VALVES  (LV40,LV41) 

4)  AV  BAY  6 

5)  AFT  LCA  3 

6)  L02  MANIFOLD  REPRESS  VALVES  POWER  AND  CONTROL  CIRCUITS 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCED  WILL  NOT  AFFECT  CREW,  VEHICLE  OR 
MISSION.  ELECTRICAL  ITEMS  INCLUDED  ARE  5 RESISTORS  AND  10 
DIODES. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-680 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7510 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  L02  MANIFOLD  REPRESS  VALVES  CONTROL  CIRCUIT  HYBRID 

DRIVER  CONTROLLER 

FAILURE  MODE:  FAILS  OFF  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

PNEUMATIC  HELIUM  SYSTEM 

3) 

L02  MANIFOLD  REPRESS  VALVES 

(LV40,LV41) 

4) 

AV  BAY  6 

5) 

AFT  LCA  3 

6) 

L02  MANIFOLD  REPRESS  VALVES 

CONTROL  CIRCUIT  HYBRID  DRIVER 

CONTROLLER  (ARIII) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE  LAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  56V76A123 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  DRIVER  OFF  WILL  NOT  ALLOW  OPENING  OF  REPRESS  VALVES 
RESULTING  IN  LOSS  OF  HELIUM  AVAILABLE  FOR  MPS  L02  DUMP.  LOSS  OF 
‘ L02  DUMP  RESULTS  IN  LOSS  OF  FLIGHT  CONTROL  AND  LOSS  OF 
LIFE/VEHICLE . 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-681 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7520 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  L02  MANIFOLD  REPRESS  VALVES  CONTROL  CIRCUIT  MDM 

COMMANDS 

FAILURE  MODE:  FAILS  OFF  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  L02  MANIFOLD  REPRESS  VALVES  (LV40,LV41) 

4)  AV  BAY  6 

5)  AFT  LCA  3 

6)  L02  MANIFOLD  REPRESS  VALVES  CONTROL  CIRCUIT  MDM  COMMANDS 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  V41F1535X,  37X 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  MDM  COMMANDS  OFF  WILL  NOT  ALLOW  OPENING  OF  REPRESS 
VALVES  RESULTING  IN  LOSS  OF  HELIUM  AVAILABLE  FOR  MPS  L02  DUMP. 
LOSS  OF  L02  DUMP  RESULTS  IN  LOSS  OF  FLIGHT  CONTROL  AND  LOSS  OF 
LIFE/VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-682 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 
SUBSYSTEM:  EPDC/MPS 
MDAC  ID:  7530 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  L02  MANIFOLD  REPRESS  VALVES  CONTROL  CIRCUIT  SWITCH 

FAILURE  MODE:  FAILS  OFF  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  L02  MANIFOLD  REPRESS  VALVES  (LV40,LV41) 

4)  PANEL  R4 

5)  TOGGLE  SWITCH  (SI) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  CONTAMINATION,  PIECE  PART  STRUCTURAL  FAILURE 
EFFECTS/RATIONALE : 

FAILURE  OF  SWITCH  OFF  WILL  NOT  ALLOW  L02  MANIFOLD  REPRESS  VALVES 
TO  OPEN  RESULTING  IN  LOSS  OF  L02  DUMP.  LOSS  OF  L02  DUMP  RESULTS 
IN  LOSS  OF  FLIGHT  CONTROL  AND  LOSS  OF  LIFE/VEHICLE. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-683 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7540 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  LH2  MANIFOLD  REPRESS  VALVES  POWER  AND  CONTROL 

CIRCUIT 

FAILURE  MODE:  FAILS  OPEN,  SHORTED,  OR  INADVERTENT  OPERATION 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  LH2  MANIFOLD  REPRESS  VALVES  (LV42,LV43) 

4)  AV  BAY  5 

5)  AFT  LCA  2 

6)  LH2  MANIFOLD  REPRESS  VALVES  POWER  AND  CONTROL  CIRCUIT 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCED  WILL  NOT  AFFECT  CREW,  VEHICLE,  OR 
MISSION.  ELECTRICAL  ITEMS  INCLUDED  ARE  5 RESISTORS  AND  10 
DIODES . 


REFERENCES:  RI  DRAWING  VS 72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-684 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7550 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  LH2  MANIFOLD  REPRESS  VALVES  CONTROL  CIRCUIT  HYBRID 

DRIVER  CONTROLLER 

FAILURE  MODE:  FAILS  ON  (PREMATURE/ ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

PNEUMATIC  HELIUM  SYSTEM 

3) 

LH2  MANIFOLD  REPRESS  VALVES 

(LV42,LV43) 

4) 

AV  BAY  5 

5) 

AFT  LCA  2 

6) 

LH2  MANIFOLD  REPRESS  VALVES 

CONTROL  CIRCUIT  HYBRID  DRIVER 

CONTROLLER  (ARIII) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B ( P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  55V76A122 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  HYBRID  DRIVER  CONTROLLER  ON  WILL  ALLOW  OFF  NOMINAL 
OPENING  OF  THE  LH2  MANIFOLD  REPRESS  VALVES  WITH  HELIUM  INGESTION 
INTO  ALL  THREE  MAIN  ENGINES  RESULTING  IN  EXPLOSION. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-685 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7560 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  LH2  MANIFOLD  REPRESS  VALVES  CONTROL  CIRCUIT  MDM 

COMMANDS 

FAILURE  MODE:  FAILS  ON  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  LH2  MANIFOLD  REPRESS  VALVES  (LV42,LV43) 

4)  AV  BAY  5 

5)  AFT  LCA  2 

6)  LH2  MANIFOLD  REPRESS  VALVES  CONTROL  CIRCUIT  MDM  COMMANDS 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  V41K1435X,  37X 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  MDM  COMMAND  ON  WILL  ALLOW  OFF  NOMINAL  OPENING  OF  LH2 
MANIFOLD  REPRESS  VALVES  WITH  HELIUM  INGESTION  INTO  ALL  THREE  MAIN 
ENGINES  RESULTING  IN  EXPLOSION. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-686 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7570 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  LH2  MANIFOLD  REPRESS  VALVES  CONTROL  CIRCUIT  SWITCH 

FAILURE  MODE:  FAILS  ON  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  LH2  MANIFOLD  REPRESS  VALVES  (LV42,LV43) 

4)  PANEL  R4 

5)  LH2  MANIFOLD  REPRESS  VALVES  CONTROL  CIRCUIT  SWITCH  (S2) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  THE  SWITCH  ON  WILL  ALLOW  OFF  NOMINAL  OPENING  OF  LH2 
MANIFOLD  REPRESS  VALVES  WITH  HELIUM  INGESTION  INTO  ALL  THREE  MAIN 
ENGINES  RESULTING  IN  EXPLOSION. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20. 


REPORT  DATE  01/16/87 


C-687 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7580 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LH2  FEED  MANIFOLD  RTLS  PRESS  VALVES  POWER  AND 

CONTROL  CIRCUIT 

FAILURE  MODE:  FAILS  OPEN,  SHORTED,  OR  INADVERTENT  OPERATION 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A.J.MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

PNEUMATIC  HELIUM  SYSTEM 

3) 

LH2  FEED  MANIFOLD  RTLS  PRESS 

VALVES 

(LV74,LV75) 

4) 

AV  BAY  4 

5) 

AFT  LCA  1 & 3 

6) 

LH2  FEED  MANIFOLD  RTLS  PRESS 

VALVES 

POWER  AND  CONTROL 

CIRCUIT 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [NA  ] 

B [NA  ] 

C [NA  ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  SEE  REFERENCES 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  ITEMS  REFERENCED  WILL  NOT  AFFECT  CREW,  VEHICLE,  OR 
MISSION.  ELECTRICAL  ITEMS  INCLUDED  ARE  10  RESISTORS  AND  8 
DIODES . 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20.1. 


REPORT  DATE  01/16/87 


C-688 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7590 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  LH2  FEED  MANIFOLD  RTLS  PRESS  VALVES  REMOTE  POWER 

CONTROLLER 

FAILURE  MODE:  FAILS  ON  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

PNEUMATIC  HELIUM  SYSTEM 

3) 

LH2  FEED  MANIFOLD  RTLS  PRESS 

VALVES 

(LV74,LV75) 

4) 

AV  BAY  4 

5) 

AFT  LCA  1 & 3 

6) 

LH2  FEED  MANIFOLD  RTLS  PRESS 

VALVES 

REMOTE  POWER  CONTROLLERS 

(RPC27,28,29  & 30) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  40V76A27,  54V76A131 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  REMOTE  POWER  CONTROLLER  ON  WILL  ALLOW  OFF  NOMINAL 
OPENING  OF  LH2  RTLS  PRESS  VALVES  WITH  HELIUM  INGESTION  INTO  ALL 
THREE  MAIN  ENGINES  RESULTING  IN  EXPLOSION. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20.1. 


REPORT  DATE  01/16/87 


C-689 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7600 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/1R 

ABORT:  3/1R 


ITEM:  LH2  FEED  MANIFOLD  RTLS  PRESS  VALVES  HYBRID  DRIVER 

CONTROLLER 

FAILURE  MODE:  FAILS  ON  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO  SUBSYS  LEAD:  A. J. MARINO 


BREAKDOWN  HIERARCHY: 


1) 

EPDC/MPS 

2) 

PNEUMATIC  HELIUM  SYSTEM 

3) 

LH2  FEED  MANIFOLD  RTLS  PRESS 

VALVES 

(LV74,LV75) 

4) 

AV  BAY  4 

5) 

AFT  LCA  1 Si  3 

6) 

LH2  FEED  MANIFOLD  RTLS  PRESS 

VALVES 

HYBRID  DRIVER 

CONTROLLERS  (ARIII) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  56V76A123,  54V76A121 

CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  HYBRID  DRIVER  CONTROLLER  ON  WILL  ALLOW  OFF  NOMINAL 
OPENING  OF  LH2  RTLS  PRESS  VALVES  WITH  HELIUM  INGESTION  INTO  ALL 
THREE  MAIN  ENGINES  RESULTING  IN  EXPLOSION. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20.1. 


REPORT  DATE  01/16/87 


C-690 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/27/87 

SUBSYSTEM:  EPDC/MPS 

MDAC  ID:  7610 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM:  LH2  FEED  MANIFOLD  RTLS  PRESS  VALVES  MDM  COMMANDS 

FAILURE  MODE:  FAILS  ON  (PREMATURE/ERRONEOUS) 


LEAD  ANALYST:  A.J.  MARINO 


SUBSYS  LEAD:  A.J. MARINO 


BREAKDOWN  HIERARCHY: 

1)  EPDC/MPS 

2)  PNEUMATIC  HELIUM  SYSTEM 

3)  LH2  FEED  MANIFOLD  RTLS  PRESS  VALVES  (LV74,LV75) 

4)  AV  BAY  4 

5)  AFT  LCA  1 & 3 

6)  LH2  FEED  MANIFOLD  RTLS  PRESS  VALVES  MDM  COMMANDS 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/1R 

DEORBIT: 

3/3 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  SEE  REFERENCES 

PART  NUMBER:  V41K1905X,  06X,  07X,  08X,  09X,  10X 


CAUSES:  VIBRATION,  CONTAMINATION,  THERMAL  SHOCK 

EFFECTS/RATIONALE : 

FAILURE  OF  MDM  COMMANDS  ON  WILL  ALLOW  OFF  NOMINAL  OPENING  OF  LH2 
RTLS  PRESS  VALVES  WITH  HELIUM  INGESTION  INTO  ALL  THREE  MAIN 
ENGINES  RESULTING  IN  EXPLOSION. 


REFERENCES:  RI  DRAWING  VS72-941102,  SHEET  20.1. 


REPORT  DATE  01/16/87 


C-691 


APPENDIX  D 

POTENTIAL  CRITICAL  ITEMS 


MDAC 

ID 

ITEM 

FAILURE  MODE 

1001 

GO 2 PRESSURE  ISOLATION  CHECK 

FAILS  TO  OPEN,  FAILS  TO 

1002 

VALVE  ( CV18 , 19,  20) 

GO 2 PRESSURE  ISOLATION  CHECK 

REMAIN  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 

1003 

VALVE  ( C V 18,  19,  20) 

GO 2 PRESSURE  ISOLATION  CHECK 

TO  REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

EXTERNAL  LEAKAGE 

1004 

VALVE  (CV18,  19,  20) 

GO 2 PRESSURE  ISOLATION  CHECK 

FAILS  TO  CLOSE 

1005 

VALVE  (CV18 , 19  20) 

GO 2 PRESSURE  ISOLATION  CHECK 

FAILS  TO  OPEN,  FAILS  TO 

1006 

VALVE  ( CV 1 8 , 19,  20) 

GO 2 PRESSUR  ISOLATION  CHECK 

REMAIN  OPEN 

SPONTANEOUS  IGNITION  IN/OF 

1012 

VALVE  ( CV 1 8 , 19,  20) 

L02  TANK  PRE- PRESS  CHECK 

PART 

FAILS  TO  CLOSE,  FAILS  TO 

1013 

VALVE  ( CV 1 6 ) 

L02  TANK  PRE-PRESS  CHECK 

REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

SPONTANEOUS  IGNITION  IN/OF 

1014 

VALVE  (CV16 ) 

L02  TANK  PRE- PRESS  CHECK 

PART 

SPONTANEOUS  IGNITION  IN/ OF 

1021 

VALVE  ( CV16 ) 

L02  BLEED  CHECK  VALVE  (CV31, 

PART 

FAILS  TO  OPEN,  FAILS  TO 

1022 

33,  35) 

L02  BLEED  CHECK  VALVE  (CV31, 

REMAIN  OPEN 

FAILS  TO  OPEN,  FAILS  TO 

1023 

33,  35) 

L02  BLEED  CHECK  VALVE  (CV31, 

REMAIN  OPEN 

FAILS  TO  OPEN,  FAILS  TO 

1024 

33,  35) 

L02  BLEED  CHECK  VALVE  (CV31, 

REMAIN  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 

1025 

33,  35) 

L02  BLEED  CHECK  VALVE  (CV31, 

REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

FAILS  TO  CLOSE,  FAILS  TO 

1026 

33,  35) 

L02  BLEED  CHECK  VALVE  (CV31, 

REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

FAILS  TO  OPEN 

1031 

33,  35) 

GO 2 PRESSURE  FLOW  CONTROL 

RESTRICTED  FLOW 

1032 

VALVE  ( LV5  3 , 54,  55) 

GO 2 PRESSURE  FLOW  CONTROL 

FAILS  TO  OPEN,  FAILS  TO 

1033 

VALVE  ( LV5  3 , 54,  55) 

GO 2 PRESSURE  FLOW  CONTROL 

REMAIN  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 

1034 

VALVE  ( LV5  3 , 54,  55) 

GO 2 PRESSURE  FLOW  CONTROL 

REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

SPONTANEOUS  IGNITION  IN/ OF 

1035 

VALVE  (LV53 , 54,  55) 

GO 2 PRESSURE  FLOW  CONTROL 

PART 

SPONTANEOUS  IGNITION  IN/OF 

1041 

VALVE  ( LV5  3 , 54,  55) 

L02  FEED  (ORB/ET)  DISCONNECT 

PART 

FAILS  TO  OPEN,  FAILS  TO 

( PD1 ) 

REMAIN  OPEN 

D-l 


MDAC 

ID  ITEM  FAILURE  MODE 

1042  L02  FEED  (ORB/ET)  DISCONNECT  EXTERNAL  LEAKAGE 
( PD1 ) 

1043  L02  FEED  (ORB/ET)  DISCONNECT  FAILS  TO  REMAIN  OPEN 
(PD1) 

1044  L02  FEED  (ORB/ET)  DISCONNECT  FAILS  TO  CLOSE,  FAILS  TO 

( PD1 ) REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

1045  L02  FEED  (ORB/ET)  DISCONNECT  EXTERNAL  LEAKAGE 

( PD1 ) 

1046  L02  FEED  (ORB/ET)  DISCONNECT  FAILS  TO  CLOSE,  FAILS  TO 

( PD1 ) REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

1052  GO 2 PRESSURIZATION  (ORB/ET)  FAILS  TO  REMAIN  OPEN 
DISCONNECT  ( PD4 ) 

1053  GO 2 PRESSURIZATION  (ORB/ET)  EXTERNAL  LEAKAGE 

DISCONNECT  ( PD4 ) 

1054  GO 2 PRESSURIZATION  (ORB/ET)  SPONTANEOUS  IGNITION  IN/OF 

DISCONNECT  ( PD4 ) PART 

1055  GO 2 PRESSURIZATION  (ORB/ET)  SPONTANEOUS  IGNITION  IN/OF 

DISCONNECT  ( PD4 ) PART 

1063  L02  TANK  PRE-PRESS  ( ORB/GND ) FAILS  TO  REMAIN  CLOSED, 

DISC  ( PD9 ) INTERNAL  LEAKAGE 

1064  L02  TANK  PRE-PRESS  (ORB/GND)  EXTERNAL  LEAKAGE 

DISC  ( PD9 ) 

1073  L02  GROUND  FILL  & DRAIN  EXTERNAL  LEAKAGE  (INTO  AFT 

(ORB/GND)  DISCONNECT  (PD12)  FUSELAGE) 

1083  L02  OVERBOARD  BLEED  (ORB/GND)  EXTERNAL  LEAKAGE  (INTO  AFT 

DISCONNECT  (PD13)  FUSELAGE) 

1085  L02  OVERBOARD  BLEED  (ORB/GND)  FAILS  TO  CLOSE,  FAILS  TO 

DISCONNECT  (PD13)  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

1091  GO 2 PRESSURIZATION  MANIFOLD  EXTERNAL  LEAKAGE 

TEST  POINT  COUPLING  (PD15) 

1092  GO 2 PRESSURIZATION  MANIFOLD  EXTERNAL  LEAKAGE 

TEST  POINT  COUPLING  (PD15) 

1093  GO 2 PRESSURIZATION  MANIFOLD  SPONTANEOUS  IGNITION  IN/OF 

TEST  POINT  COUPLING  (PD15)  PART 

1094  GO 2 PRESSURIZATION  MANIFOLD  SPONTANEOUS  IGNITION  IN/OF 

TEST  POINT  COUPLING  (PD15)  PART 

1102  L02  PREVALVE  (PV1,  2,  3)  FAILS  TO  REMAIN  OPEN 

1103  L02  PREVALVE  (PV1,  2,  3)  EXTERNAL  LEAKAGE 

1104  L02  PREVALVE  (PV1,  2,  3)  FAILS  TO  RELIEVE 

1107  L02  PREVALVE  (PV1,  2,  3)  FAILS  TO  REMAIN  OPEN 

1108  L02  PREVALVE  (PV1,  2,  3)  FAILS  TO  CLOSE,  FAILS  TO 

REMAIN  CLOSED,  INTERNAL 

1123  L02  FEEDLINE  RELIEF  SHUTOFF  EXTERNAL  LEAKAGE 

VALVE  ( PV7 ) 

1124  L02  FEEDLINE  RELIEF  SHUTOFF  FAILS  TO  OPEN,  FAILS  TO 

VALVE  ( PV7 ) REMAIN  OPEN 

1131  L02  OUTBOARD  FILL  AND  DRAIN  FAILS  TO  OPEN,  FAILS  TO 

VALVE  ( PV9 ) REMAIN  OPEN 
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FAILURE  MODE 


MDAC 

ID 


1132 

1135 

1151 

1152 
1155 
1157 

1174 

1175 

1176 


1183 

1184 

1185 
1192 
1202 
1211 
1221 
1231 

1241 

1242 

1243 

1252 

1253 
1261 
1262 
1263 

1271 

1272 

1273 
1281 
1282 


ITEM 


L02  OUTBOARD  FILL  AND  DRAIN 
VALVE  ( PV9 ) 

L02  OUTBOARD  FILL  AND  DRAIN 
VALVE  ( PV9 ) 

L02  INBOARD  FILL  AND  DRAIN 
VALVE  (PV10) 

L02  INBOARD  FILL  AND  DRAIN 
VALVE  (PV10) 

L02  INBOARD  FILL  AND  DRAIN 
VALVE  (PV10) 

L02  INBOARD  FILL  AND  DRAIN 
VALVE  (PV10) 

L02  BLEED  SHUTOFF  VALVE  (PV19) 
L02  BLEED  SHUTOFF  VALVE  (PV19) 
L02  BLEED  SHUTOFF  VALVE  (PV19) 


L02  POGO  ACCUMULATOR 
RECIRCULATION  VALVE  (PV20,  21) 
L02  POGO  ACCUMULATOR 
RECIRCULATION  VALVE  (PV20,  21) 
L02  POGO  ACCUMULATOR 
RECIRCULATION  VALVE  (PV20,  21) 
L02  LOW  LEVEL  LIQUID  SENSOR 
(MT1 , 2) 

L02  SYSTEM  DELTA  P TRANSDUCER 
( MT44 , 50) 

L02  PREPRESS  DISCONNECT  CHECK 
VALVE  TEST  PORT  (TP 9) 

L02  17  INCH  ORBITER  DISCONNECT 
TEST  PORT  (TP17 , 18) 

L02  FEEDLINE  RELIEF  TEST  PORT 
( TP24 ) 

L02  FEEDLINE  MANIFOLD  (MAI) 

L02  FEEDLINE  MANIFOLD  (MAI) 

L02  FEEDLINE  MANIFOLD  (MAI) 

L02  FILL  & DRAIN  LINE  (FH1 ) 

L02  FILL  & DRAIN  LINE  (FH1 ) 

L02  17  INCH  FEEDLINE  ( FH2 ) 

L02  17  INCH  FEEDLINE  ( FH2 ) 

L02  17  INCH  FEEDLINE  ( FH2 ) 

L02  12  INCH  FEEDLINE  ( FH3 , 

4,  5) 

L02  12  INCH  FEEDLINE  ( FH3 , 

4,  5) 

L02  12  INCH  FEEDLINE  ( FH3 , 

4,  5) 

L02  FEED  MANIFOLD  RELIEF 
VALVE  (RV5 ) 

L02  FEED  MANIFOLD  RELIEF 
VALVE  (RV5 ) 


EXTERNAL  LEAKAGE 

EXTERIOR  LEAKAGE 

FAILS  TO  OPEN,  FAILS  TO 
REMAIN  OPEN 
EXTERIOR  LEAKAGE 

FAILS  TO  REMAIN  CLOSED, 
INTERNAL  LEAKAGE 
EXTERNAL  LEAKAGE 

EXTERIOR  LEAKAGE 

FAILS  TO  RELIEVE 

FAILS  TO  CLOSE,  FAILS  TO 

REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

EXTERIOR  LEAKAGE 

FAILS  TO  RELIEVE 

FAILS  TO  REMAIN  OPEN 

ERRONEOUS  OUTPUT  (FALSE  DRY) 

EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 

BLOCKED  FLOW 
RUPTURE 

EXTERNAL  LEAKAGE 
RUPTURE 

EXTERNAL  LEAKAGE 
BLOCKED  FLOW 
RUPTURE 

EXTERNAL  LEAKAGE 
BLOCKED  FLOW 

RUPTURE 

EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 

FAILS  TO  REMAIN  CLOSED, 
INTERNAL  LEAKAGE 
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FAILURE  MODE 


MDAC 

ID 

1283 

2001 

2002 

2005 

2007 

2011 

2012 

2013 

2016 

2021 

2031 

2041 

2042 

2043 

2054 

2055 
2062 

2063 

2071 

2081 

2083 

2093 

2094 
2103 
2111 
2112 
2121 


ITEM 

L02  FEED  MANIFOLD  RELIEF 
VALVE  (RV5 ) 

LH2  INBOARD  FILL  AND  DRAIN 
VALVE  ( PV12 ) 

LH2  INBOARD  FILL  AND  DRAIN 
VALVE  ( PV12 ) 

LH2  INBOARD  FILL  AND  DRAIN 
VALVE  ( PV12 ) 

LH2  INBOARD  FILL  AND  DRAIN 
VALVE  ( PV12 ) 

LH2  OUTBOARD  FILL  AND  DRAIN 
VALVE  (PV11) 

LH2  OUTBOARD  FILL  AND  DRAIN 
VALVE  (PV11) 

LH2  OUTBOARD  FILL  AND  DRAIN 
VALVE  (PV11) 

LH2  OUTBOARD  FILL  AND  DRAIN 
VALVE  (PV11) 

LH2  FILL  AND  DRAIN  LINE  ( FH6 ) 
LH2  GROUND  FILL  AND  DRAIN 
(ORB/GND)  DISCONNECT 
(ORBITER  HALF)  (PD11) 

LH2  HI  POINT  BLEED  (ORB/GND) 
DISCONNECT  (ORB  HALF)  (PD17) 
LH2  HI  POINT  BLEED  (ORB/GND) 
DISCONNECT  (ORB  HALF)  (PD17) 
LH2  HI  POINT  BLEED  (ORB/GND) 
DISCONNECT  (ORB  HALF)  (PD17) 
LH2  REPLENISH  VALVE  (PV13) 

LH2  REPLENISH  VALVE  (PV13) 

LH2  HI  POINT  BLEED  VALVE 
( PV22 ) 

LH2  HI  POINT  BLEED  VALVE 
( PV22 ) 

LH2  SYSTEM  DELTA-P 
TRANSDUCER  (MT44,  MT50 ) 

LH2  HI  POINT  BLEED  LINE  (FH19 
LH2  HI  POINT  BLEED  LINE  (FH19 
LH2  RECIRCULATION  DISCONNECT 
VALVE  ( PD3 ) 

LH2  RECIRCULATION  DISCONNECT 
VALVE  ( PD3 ) 

LH2  RECIRCULATION  PUMP  VALVE 
( PV14 , PV15 , PV16 ) 

LH2  PRESTART  CONDITIONING 
MANIFOLD  ( MA3 ) 

LH2  PRESTART  CONDITIONING 
MANIFOLD  (MA3 ) 

LH2  PRESTART  CONDITIONING 
PUMP  LINE  ( FH11 , FH1 3 , FH15) 


FAILS  TO  RELIEVE 
FAIL  TO  REMAIN  OPEN 
FAIL  TO  REMAIN  CLOSED 
FAIL  TO  RELIEVE 
EXTERNAL  LEAKAGE 
FAIL  TO  REMAIN  OPEN 
FAIL  TO  REMAIN  CLOSED 
FAIL  TO  OPEN 
EXTERNAL  LEAKAGE 
RUPTURE 

EXTERNAL  LEAKAGE 

EXTERNAL  LEAK 

FAIL  TO  CLOSE 

FAIL  TO  REMAIN  CLOSED 

FAIL  TO  REMAIN  CLOSED 
EXTERNAL  LEAKAGE 
FAIL  TO  REMAIN  CLOSED, 
FAIL  TO  CLOSE 
EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 

) RUPTURE 

) LOSS  OF  INSULATING  VACUUM 
FAIL  TO  CLOSE,  FAIL  TO 
REMAIN  CLOSED 
EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 

RUPTURE 

EXTERNAL  LEAKAGE 
RUPTURE 
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MDAC 

ID 

ITEM 

FAILURE  MODE 

2131 

LH2  PRESTART  CONDITIONING 

RUPTURE 

2132 

RETURN  LINE  (PHI 2,  FH14,  FH16) 
LH2  PRESTART  CONDITIONING 

EXTERNAL  LEAKAGE 

2141 

RETURN  LINE  (FH12,  FH14,  FH16) 
LH2  PRESTART  CONDITIONING 

RUPTURE 

2151 

REPLENISH  LINE  (FH17) 

LH2  PRESTART  CONDITIONING 

RUPTURE 

2161 

RETURN  LINE  (FH18) 

LH2  RECIRCULATION  MANIFOLD 

FAIL  TO  OPEN  (RELIEVE) 

2163 

RELIEF  VALVE  (RV7 ) 

LH2  RECIRCULATION  MANIFOLD 

EXTERNAL  LEAKAGE 

2177 

RELIEF  VALVE  (RV7 ) 

LH2  RECIRCULATION  PUMP 

EXTERNAL  LEAKAGE 

2182 

(PP1,  PP2 , PP3 ) 

LH2  PRE-PRESS  CHECK  VALVE 

FAIL  TO  CLOSE  (RESEAT), 

2183 

( CV17 ) 

LH2  PRE-PRESS  CHECK  VALVE 

FAIL  TO  REMAIN  CLOSED 
EXTERNAL  LEAKAGE 

2191 

( CV17 ) 

GH2  PRESSURIZATION  ISOLATION 

FAIL  TO  OPEN,  FAIL  TO 

2192 

CHECK  VALVE  ( CV21 , CV22 , CV23 ) 
GH2  PRESSURIZATION  ISOLATION 

REMAIN  OPEN 
EXTERNAL  LEAKAGE 

2201 

CHECK  VALVE  (CV21 ,CV22 ,CV23 
AND  TEST  PORTS  TP5,TP6,TP7) 
GH2  PRESSURIZATION  FLOW 

FAIL  TO  OPEN,  FAIL  TO 

2202 

CONTROL  VALVE  ( LV56 , LV57 , LV58 ) 
GH2  PRESSURIZATION  FLOW 

REMAIN  OPEN 

FAIL  TO  CLOSE,  FAIL  TO 

2203 

CONTROL  VALVE  ( LV56 , LV57 , LV58 ) 
GH2  PRESSURIZATION  FLOW 

REMAIN  CLOSED 
EXTERNAL  LEAKAGE 

2211 

CONTROL  VALVE  ( LV56 , LV57 , LV58 ) 
GH2  PRESSURIZATION  DISCONNECT 

FAIL  TO  OPEN,  FAIL  TO 

2212 

(PD5) 

GH2  PRESSURIZATION  DISCONNECT 

REMAIN  OPEN 

FAIL  TO  CLOSE,  FAIL  TO 

2213 

( PD5  ) 

GH2  PRESSURIZATION  DISCONNECT 

REMAIN  CLOSED 
EXTERNAL  LEAKAGE 

2222 

( PD5  ) 

LH2  TANK  GROUND  PRE-PRESS 

FAIL  TO  CLOSE,  FAIL  TO 

2231 

DISCONNECT  (PD10) 

GH2  PRESSURIZATION  MANIFOLD 

REMAIN  CLOSED,  EXTERNAL 
LEAKAGE 

EXTERNAL  LEAKAGE 

2241 

TEST  POINT  COUPLING  (PD16) 
LH2  PREPRESSURIZATION 

EXTERNAL  LEAKAGE 

2251 

DISCONNECT  CHECK  VALVE  TEST 
PORT  ( TP 10 ) 

GH2  PRESSURIZATION  DUAL  CHECK 

EXTERNAL  LEAKAGE 

2261 

VALVE  TEST  PORT  (TP21 ,TP22 ,TP23 ) 

LH2  FEED  DISCONNECT  VALVE  FAIL  TO  OPEN,  FAIL  TO 

2262 

( PD2  ) 

LH2  FEED  DISCONNECT  VALVE 

REMAIN  OPEN 

FAIL  TO  CLOSE,  FAIL 

2263 

( PD2 ) 

LH2  FEED  DISCONNECT  VALVE 

TO  REMAIN  CLOSED 
EXTERNAL  LEAKAGE 

( PD2 ) 
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MDAC 

ID 

ITEM 

FAILURE  MODE 

2271 

LH2  PREVALVE  ( PV4 , PV5 , PV6 ) 

FAIL  TO  OPEN,  FAIL  TO 

2273 

LH2  PREVALVE  ( PV4 , PV5 , PV6 ) 

REMAIN  OPEN 
EXTERNAL  LEAKAGE 

2274 

LH2  PREVALVE  ( PV4 , PV5 , PV6 ) 

FAIL  TO  RELIEVE 

2281 

LH2  17  INCH  ORBITER  DISCONNECT 

EXTERNAL  LEAKAGE 

2291 

TEST  PORT  ( TP11 ,TP12 ) 

LH2  FEEDLINE  MANIFOLD  ( MA2 ) 

RUPTURE 

2292 

LH2  FEEDLINE  MANIFOLD  (MA2) 

RESTRICTED  FLOW 

2301 

LH2  17  INCH  FEEDLINE  ( FH7 ) 

RUPTURE 

2302 

LH2  17  INCH  FEEDLINE  ( FH7 ) 

RESTRICTED  FLOW 

2311 

LH2  12  INCH  FEEDLINE 

RUPTURE 

2312 

( FH8 , FH9 , FH1 0 ) 

LH2  12  INCH  FEEDLINE 

RESTRICTED  FLOW 

2321 

( FH8 , FH9 , FH10 ) 

LH2  FEEDLINE  RELIEF  SHUTOFF 

FAIL  TO  OPEN,  FAIL  TO 

2322 

VALVE  (PV8) 

LH2  FEEDLINE  RELIEF  SHUTOFF 

REMAIN  OPEN 

FAIL  TO  CLOSE,  FAIL  TO 

2323 

VALVE  ( PV8 ) 

LH2  FEEDLINE  RELIEF  SHUTOFF 

REMAIN  CLOSED 
EXTERNAL  LEAKAGE 

2331 

VALVE  ( PV8 ) 

LH2  FEEDLINE  RELIEF  LINE  TEST 

EXTERNAL  LEAKAGE 

2341 

PORT  ( TP25 ) 

LH2  FEEDLINE  MANIFOLD  RELIEF 

FAIL  TO  OPEN  (RELIEVE) 

2352 

VALVE  ( RV6 ) 

LH2  DUMP  PRESSURIZATION 

EXTERNAL  LEAK 

2373 

ORIFICE  (RP10 ) 

LH2  PRESSURIZATION  LINE  VENT 

EXTERNAL  LEAKAGE 

2381 

VALVE  ( LV52 ) 

LH2  FEED  RTLS  INBOARD  VALVE 

FAIL  TO  OEPN,  FAIL  TO 

2382 

( PV17 ) 

LH2  FEED  RTLS  INBOARD  VALVE 

REMAIN  OPEN 

FAIL  TO  CLOSE,  FAIL  TO 

2383 

( PV1 7 ) 

LH2  FEED  RTLS  INBOARD  VALVE 

REMAIN  CLOSED 
EXTERNAL  LEAKAGE 

2391 

( PV17 ) 

LH2  FEED  RTLS  OUTBOARD  VALVE 

FAIL  TO  OPEN,  FAIL  TO 

2392 

( PV1 8 ) 

LH2  FEED  RTLS  OUTBOARD  VALVE 

REMAIN  OPEN 

FAIL  TO  CLOSE,  FAIL  TO 

2393 

( PV1 8 ) 

LH2  FEED  RTLS  OUTBOARD  VALVE 

REMAIN  CLOSED 
EXTERNAL  LEAKAGE 

3010 

( PV18 ) 

ENGINE  HELIUM  SUPPLY  CHECK 

FAILS  TO  CLOSE,  OR  REMAIN 

3020 

VALVE  ( CV1 , CV2 , CV3 ) 
HELIUM  SUPPLY  DISCONNECT 

CLOSED 

FAILS  TO  CLOSE,  OR  REMAIN 

3021 

(ORB/GND,  ORB  HALF),  ( PD8 ) 
HELIUM  SUPPLY  DISCONNECT 

CLOSED 

EXTERNAL  LEAKAGE 

3030 

(ORB/GND,  ORB  HALF),  ( PD8 ) 
TEST  PORT  (TP8 ) 

LEAKAGE 

3040 

17.3  CU.  FT.  HELIUM  SUPPLY 

RAPID  LEAK 

3050 

TANK  ( TK6 , 8,  10) 

4.7  CU.  FT.  HELIUM  SUPPLY 

RAPID  LEAK 

TANK  ( TK1 ,2,3,7,9,11) 
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MDAC 

ID 

3060 

3071 

3080 

3081 

3082 
3092 

3111 

3112 

3120 

3121 

3122 

3123 
3130 
3150 

3162 

3181 

3200 

4021 

4030 

4051 

4090 

4100 

4152 


ITEM 


FAILURE  MODE 


PRESSURE  TAP  PORT  (TP26,27,28) 
ENGINE  HELIUM  SUPPLY  CHECK 
VALVE  (CV25 ,26; 36, 37; 41, 42) 
ENGINE  HELIUM  SUPPLY  FILTER  - 
PANEL  A;B  ( FL2 , 6 ; 3 , 7 ; 4 , 8 ) 
ENGINE  HELIUM  SUPPLY  FILTER  - 
PANEL  A; B (FL2 , 6 ; 3 , 7 ; 4 , 8 ) 
ENGINE  HELIUM  SUPPLY  FILTER  - 
PANEL  A;B  (FL2 , 6 ; 3 , 7 ; 4 , 8 ) 
ENGINE  HELIUM  SUPPLY 
ISOLATION  VALVE  ( LV1 , 2 ; 3 , 4 ; 5 , 6 
ENGINE  HELIUM  PRESSURE 
REGULATOR  ( PR1 , 7 ; 2 , 8 ; 3 , 9 ) 
ENGINE  HELIUM  PRESSURE 
REGULATOR  ( PR1 , 7 ; 2 , 8 ; 3 , 9 ) 

HE  RELIEF  VALVE  PANEL  A;B 
(RV1 , 8 ; 2 , 9 ; 3 , 10 ) 

ENGINE  HE  RELIEF  VALVE  PANEL 
A; B ( RV1 ,8;2,9;3,10) 

ENGINE  HE  RELIEF  VALVE  PANEL 
A;B  (RV1 ,8;2,9;3,10) 

ENGINE  HE  RELIEF  VALVE  PANEL 
A; B (RV1 ,8;2,9;3,10) 

ENGINE  HELIUM  SUPPLY  RELIEF 
VALVE  SENSE  LINE 
ENGINE  HELIUM  SUPPLY 
INTERCONNECT  INLET  VALVE 
( LV59 ,61,63) 

ENGINE  HELIUM  SUPPLY 
INTERCONNECT  OUTLET  VALVE 
( LV 60,62,64) 

ENGINE  HELIUM  INTERCONNECT 
CHECK  VALVE- PANEL  INLET 
(CV27, 38,43) 

FACILITY  PORTS 

PNEU  VALVE  HE  ISOLATION  CHECK 
VALVE  ( CV8 ) 

PNEU  VALVE  HE  ISOLATION  CHECK 
VALVE  ( CV9 ) 

L02  FEED  MANIF  REPRESS  CHECK 
VALVE  ( C V 1 2 ) 

L02  TANK  PRE- PRESS  CHECK 
VALVE  ( CV16 ) 

LH2  TANK  PRE-PRESS  CHECK 
VALVE  ( CV 1 7 ) 

L02  PREVALVE  OPENING 
SOLENOID  ( LV12 , LV14 , LV16 ) 


RAPID  LEAK 

FAILS  TO  OPEN,  OR  REMAIN 
OPEN 

RESTRICTED  FLOW,  BLOCKAGE 

EXTERNAL  LEAKAGE 

STRUCTURAL  FAILURE  ( ELEMENT 
COLLAPSE ) 

EXTERNAL  LEAKAGE 

) 

FAILS  OUT  OF  TOLERANCE  (HIGH) 

EXTERNAL  LEAKAGE 

FAILS  TO  CLOSE  (RESEAT),  OR 
REMAIN  CLOSED 
INTERNAL  LEAKAGE 

FAILS  TO  OPEN 

EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 

FAILS  TO  OPEN  OR  REMAIN 
OPEN 

EXTERNAL  LEAKAGE 


FAILS  TO  OPEN,  OR  REMAIN 
OPEN 

GROSS  LEAKAGE 

FAILS  TO  OPEN,  EXTERNAL 

LEAKAGE 

FAILS  TO  OPEN,  EXTERNAL 

LEAKAGE 

FAILS  TO  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED,  INTERNAL 
LEAKAGE 
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MDAC 

ID 

4160 

4161 

4166 

4167 

4168 

4170 

4171 

4172 

4180 

4181 

4182 

4190 

4192 

4202 

4222 

4224 

4228 

4234 

4236 

4252 

4260 


ITEM 

L02  PREVALVE  OPENING 
SOLENOID  ( LV1 3 , LV15 , LV17 ) 

L02  PRE VALVE  CLOSING 
SOLENOID  (LV13 ,LV15 ,LV17 ) 

LH2  PREVALVE  OPENING 
SOLENOID  (LV18 ,LV20 ,LV22 ) 

LH2  PREVALVE  CLOSING 
SOLENOID  (LV19 ,LV21 ,LV23 ) 

LH2  PRE VALVE  CLOSING 
SOLENOID  (LV19 ,LV21 ,LV23 ) 

L02  FEEDLINE  RELIEF  SHUTOFF 
VALVE  CLOSING  SOLENOID  (LV24) 
L02  FEEDLINE  RELIEF  SHUTOFF 
VALVE  CLOSING  SOLENOID  (LV24) 
L02  FEEDLINE  RELIEF  SHUTOFF 
VALVE  CLOSING  SOLENOID  (LV24) 

LH2  FEEDLINE  RELIEF  SHUTOFF 
VALVE  CLOSING  SOLENOID  (LV25) 
LH2  FEEDLINE  RELIEF  SHUTOFF 
VALVE  CLOSING  SOLENOID  (LV25) 
LH2  FEEDLINE  RELIEF  SHUTOFF 
VALVE  CLOSING  SOLENOID  (LV25) 

HE  SUPPLY  BLOWDOWN  VALVE 
( LV26 , LV27 ) 

HE  SUPPLY  BLOWDOWN  VALVE 
( LV26 , LV27 ) 

L02  OUTBOARD  FILL  VALVE 
OPENING  SOLENOID  (LV28) 

L02  INBOARD  FILL  VALVE 
OPENING  SOLENOID  (LV30) 

L02  INBOARD  FILL  VALVE 
CLOSING  SOLENOID  (LV31) 

LH2  OUTBOARD  FILL  VALVE 
OPENING  SOLENOID  (LV32) 

LH2  INBOARD  FILL  VALVE 
OPENING  SOLENOID  (LV34) 

LH2  INBOARD  FILL  VALVE 
CLOSING  SOLENOID  (LV35) 

LH2  REPLENISH  VALVE  OPENING 
SOLENOID  ( LV  3 9 ) 

L02  MANIFOLD  REPRESS  VALVE 
( LV40 , LV41 ) 


FAILURE  MODE 

FAILS  TO  OPEN,  EXTERNAL 
LEAKAGE 

FAILS  TO  REMAIN  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

FAILS  TO  OPEN,  EXTERNAL 
LEAKAGE 

FAILS  TO  REMAIN  OPEN 

FAILS  TO  OPEN,  EXTERNAL 
LEAKAGE 

FAILS  TO  REMAIN  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

FAILS  TO  OPEN,  EXTERNAL 
LEAKAGE 

FAILS  TO  REMAIN  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED , INTERNAL 
LEAKAGE 

FAILS  TO  OPEN,  EXTERNAL 
LEAKAGE 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED , INTERNAL 
LEAKAGE 

FAILS  TO  REMAIN  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED , INTERNAL 
LEAKAGE 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED , INTERNAL 
LEAKAGE 

FAILS  TO  REMAIN  OPEN, 
EXTERNAL  LEAKAGE 
FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

FAILS  TO  OPEN,  EXTERNAL 
LEAKAGE 
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MDAC 

ID 


ITEM 


FAILURE  MODE 


4261  L02  MANIFOLD  REPRESS  VALVE  FAILS  TO  REMAIN  OPEN 

( LV40 , LV41 ) 

4281  L02  FEED  DISCONNECT  VALVE  FAILS  TO  REMAIN  OPEN, 

OPENING  SOLENOID  (LV46)  EXTERNAL  LEAKAGE 

4301  LH2  FEED  DISCONNECT  VALVE  FAILS  TO  REMAIN  OPEN, 

OPENING  SOLENOID  (LV48)  EXTERNAL  LEAKAGE 

4322  LH2  RECIRC  DISCONNECT  VALVE  FAILS  TO  CLOSE,  FAILS  TO 
OPENING  SOLENOID  (LV50)  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

4330  LH2  RECIRC  DISCONNECT  VALVE  FAILS  TO  OPEN,  EXTERNAL 

CLOSING  SOLENOID  (LV51)  LEAKAGE 

4331  LH2  RECIRC  DISCONNECT  VALVE  FAILS  TO  REMAIN  OPEN 
CLOSING  SOLENOID  (LV51) 

4340  LH2  FEED  RTLS  INBOARD  DUMP  FAILS  TO  OPEN,  EXTERNAL 

VALVE  OPENING  SOLENOID  (LV72)  LEAKAGE 

4341  LH2  FEED  RTLS  INBOARD  DUMP  FAILS  TO  REMAIN  OPEN 

VALVE  OPENING  SOLENOID  (LV72) 

4342  LH2  FEED  RTLS  INBOARD  DUMP  FAILS  TO  CLOSE,  FAILS  TO 

VALVE  OPENING  SOLENOID  (LV72)  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

4350  LH2  FEED  RTLS  OUTBOARD  DUMP  FAILS  TO  OPEN,  EXPERNAL 
VALVE  OPENING  SOLENOID  (LV73)  LEAKAGE 

4351  LH2  FEED  RTLS  OUTBOARD  DUMP  FAILS  TO  REMAIN  OPEN 
VALVE  OPENING  SOLENOID  (LV73) 

4352  LH2  FEED  RTLS  OUTBOARD  DUMP  FAILS  TO  CLOSE,  FAILS  TO 
VALVE  OPENING  SOLENOID  (LV73)  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

4362  LH2  FEED  MANIFOLD  RTLS  PRESS  FAILS  TO  CLOSE,  FAILS  TO 
VALVE  ( LV7 4 , LV7 5 ) REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

4370  L02  OVERBOARD  BLEED  VALVE  FAILS  TO  OPEN,  EXTERNAL 

CLOSING  SOLENOID  (LV76)  LEAKAGE 

4371  L02  OVERBOARD  BLEED  VALVE  FAILS  TO  REMAIN  OPEN 

CLOSING  SOLENOID  (LV76) 

4382  L02  POGO  ACCUM  RECIRC  VALVE  FAILS  TO  CLOSE,  FAILS  TO 

CLOSING  SOLENOID  (LV77,LV78)  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

4392  LH2  HI  POINT  BLEED  VALVE  FAILS  TO  CLOSE,  FAILS  TO 

OPENING  SOLENOID  (LV79)  REMAIN  CLOSED,  INTERNAL 

LEAKAGE 

4400  L02  PREVALVE  REDUNDANT  FAILS  TO  OPEN,  EXPERNAL 

CLOSING  SOLENOID  (LV80,LV81,  LEAKAGE 

LV82  ) 

4401  L02  PREVALVE  REDUNDANT  FAILS  TO  REMAIN  OPEN 

CLOSING  SOLENOID  (LV80,LV81, 

LV82 ) 

4412  L02  PREVALVE  REDUNDANT  FAILS  TO  CLOSE,  FAILS  TO 

OPENING  SOLENOID  (LV83,LV84,  REMAIN  CLOSED,  INTERNAL 
LV85 ) LEAKAGE 


D-9 


FAILURE  MODE 


MDAC 

ID 

4420 

4422 

4430 

4432 

4460 

4490 

4500 

4510 

4530 

4540 

4550 

4570 

4580 

4590 

4630 

4640 

4650 

5001 

5002 

5003 

5004 

5011 

5012 


ITEM 


L02  TANK  GND  PRE-PRESS 
(ORB/GND)  DISC.  (ORB  HALF) 

( PD9  ) 

L02  TANK  GND  PRE- PRESS 
(ORB/GND)  DISC.  (ORB  HALF) 

( PD9  ) 

LH2  TANK  GND  PRE-PRESS 
(ORB/GND)  DISC.  (ORB  HALF) 

( PD10 ) 

LH2  TANK  GND  PRE-PRESS 
(ORB/GND)  DISC.  (ORB  HALF) 

( PD10 ) 

TEST  PORT,  PNEU  HE  OUTLET 
( TP1 ) 

TEST  PORT,  L02  PREPRESS  DISC. 
CHECK  VALVE  (TP9 ) 

TEST  PORT,  LH2  PREPRESS  DISC. 
CHECK  VALVE  (TP10) 

TEST  PORT,  PNEU  SUPPLY 
HELIUM  (TP29 ) 

PNEU  VALVE  HE  SUPPLY 
REGULATOR  ( PR4 ) 

L02  MANIF  REPRESS  REGULATOR 
(PR5) 

LH2  MANIF  REPRESS  REGULATOR 
(PR6) 

PNEU  VALVE  HE  SUPPLY  TANK 
(TK4  ) 

L02  PREVALVE  PNEU  ACCUMULATOR 
( AU5  ) 

LH2  PREVALVE  PNEU  ACCUMULATOR 

( AU6  ) 

PNEUMATIC  HE  PRESSURE  LINE 
( .50"  DIA) 

PNEUMATIC  HE  PRESS  VALVE 
ACTUATION  LINE  (.25",. 38"  DIA) 
PNEUMATIC  HELIUM  INTERCONNECT 
LINE  ( .63", 1.00”, .50"  DIA) 

L02  PREVALVE  TOGGLE  SWITCH 

L02  PREVALVE  TOGGLE  SWITCH 

FUSE  (1A)  (4  PER  CIRCUIT) 

FUSE  (1A)  (4  PER  CIRCUIT) 

MDM  ( FA1 ) 

MDM  ( FA2 ) 


FAILS  TOA  CLOSE,  FAILS  TO 
REMAIN  CLOSED , INTERNAL 
LEAKAGE 

EXTERNAL  LEAKAGE 


FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED,  INTERNAL 
LEAKAGE 

EXTERNAL  LEAKAGE 


EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 

RESTRICTED  FLOW,  FAILS  TO 
OPEN,  EXTERNAL  LEAKAGE 
RESTRICTED  FLOW,  FAILS  TO 
OPEN,  EXTERNAL  LEAKAGE 
RESTRICTED  FLOW,  FAILS  TO 
OPEN,  EXTERNAL  LEAKAGE 
EXTERNAL  LEAKAGE,  STRUCTURAL 
FAILURE  (RUPTURE) 

EXTERNAL  LEAKAGE,  STRUCTURAL 
FAILURE  ( RUPTURE ) 

EXTERNAL  LEAKAGE , STRUCTURAL 
FAILURE  (RUPTURE) 

STRUCTURAL  FAILURE  (RUPTURE) 

STRUCTURAL  FAILURE  (RUPTURE) 

STRUCTURAL  FAILURE  (RUPTURE) 

FAILS  (SHORTS)  (FALSE  OPEN 
COMMAND ) 

FAILS  (SHORTS)  (FALSE  CLOSE 
COMMAND ) 

FAILS  OPEN  (INHIBIT  CLOSE 
COMMAND ) 

FAILS  OPEN  (INHIBIT  OPEN 
COMMAND ) 

PREMATURE/ERRONEOUS  OFF 
(INHIBITS  CLOSING  SOLENOIDS) 
PREMATURE/ERRONEOUS  OFF 
(INHIBITS  CLOSING  SOLENOIDS) 


D-10 


MDAC 

ID 


ITEM 


FAILURE  MODE 


5013  MDM  ( FA3 ) 

5014  MDM  ( FA4 ) 

5031  HYBRID  DRIVER,  TYPE  3 
(2  PER  CIRCUIT) 

5033  HYBRID  DRIVER,  TYPE  1 

5035  DIODE,  ISOLATION  (12A) 

(2  PER  CIRCUIT) 

5041  HYBRID  DRIVER,  TYPE  3 

(2  PER  CIRCUIT) 

5042  HYBRID  DRIVER,  TYPE  1 

5043  REMOTE  POWER  CONTROLLER 

(2  PER  CIRCUIT) 

5044  DIODE,  ISOLATION  (12A) 

(2  PER  CIRCUIT) 

5051  HYBRID  DRIVER,  TYPE  3 
(2  PER  CIRCUIT) 

5052  REMOTE  POWER  CONTROLLER 
(2  PER  CIRCUIT) 

5053  DIODE,  ISOLATION  (12A) 

(2  PER  CIRCUIT) 

5061  HYBRID  DRIVER,  TYPE  3 

(2  PER  CIRCUIT) 

5064  DIODE,  ISOLATION  (12A) 

(2  PER  CIRCUIT) 

5071  DIODE  (10  PER  CIRCUIT) 

5072  DIODE  (2  PER  CIRCUIT) 

5073  DIODE  (3  PER  CIRCUIT) 

5074  DIODE  (10  PER  CIRCUIT) 

5075  DIODE  (6  PER  CIRCUIT) 

5076  DIODE  (7  PER  CIRCUIT) 

5121  L02  FEEDLINE  RELIEF  SHUTOFF 
VALVE  TOGGLE  SWITCH 

5122  L02  FEEDLINE  RELIEF  SHUTOFF 
VALVE  TOGGLE  SWITCH 

5125  HYBRID  DRIVER,  TYPE  3 (AR42) 

5127  HYBRID  DRIVER,  TYPE  3 (AR30) 

5128  REMOTE  POWER  CONTROLLER 
( RPC28 ) 


PREMATURE /ERRONEOUS  OFF 
(INHIBITS  CLOSING  SOLENOIDS) 
PREMATURE/ERRONEOUS  OFF 
(INHIBITS  CLOSING  SOLENOIDS) 
FAIL  ON  (FALSE  OPEN  COMMAND, 
ACTIVATE  LV12 , LV14,  LV16) 
FAIL  OFF  (INHIBIT  LV12, 

LV14 , LV16 ) 

FAILS  OPEN,  FAILS  TO  CONDUCT 
POWER 

FUSE  FAIL  OPEN  (INHIBIT  LV13, 
LV15 , LV17 ) 

FAIL  OFF  (INHIBIT  LV13,  LV15, 
LV17  ) 

PREMATURE/ERRONEOUS  OFF 
(INHIBIT  LV1 3 , LV15 , LV17) 
FAILS  OPEN,  FAILS  TO  CONDUCT 
POWER  (INHIBIT  LV13,  LV15, 
LV17  ) 

FUSE  FAIL  OPEN  (INHIBIT  LV80, 
LV81 , LV82 ) 

PREMATURE /ERRONEOUS  OFF 
(INHIBIT  LV80 , LV81,  LV82) 
FAILS  OPEN,  FAILS  TO  CONDUCT 
POWER  (INHIBIT  LV80,  LV81, 
LV82 ) 

FAIL  ON  (FALSE  OPEN  COMMAND, 
ACTIVATE  LV8  3 , LV84,  LV85) 
FAILS  OPEN,  FAILS  TO  CONDUCT 
POWER 

FAILS  OPEN  (INHIBIT  OPEN 
COMMAND  TO  OPENING  SOLENOIDS) 
AILS  OPEN  (INHIBIT  OPEN 
COMMAND  TO  OPENING  SOLENOIDS) 
FAILS  OPEN  (INHIBIT  OPEN 
COMMAND  TO  OPENING  SOLENOIDS) 
FAILS  OPEN  (INHIBIT  CLOSE 
COMMAND  TO  CLOSING  SOLENOIDS) 
FAILS  OPEN  (INHIBIT  CLOSE 
COMMAND  TO  CLOSING  SOLENOIDS) 
FAILS  OPEN  (INHIBIT  CLOSE 
COMMAND  TO  CLOSING  SOLENOIDS) 
FAIL  SHORTED  OPEN-TO-BUS 
(ACTIVATE  LV24 ) 

FAIL  PREMATURE  OPEN-TO-BUS 
(ACTIVATE  LV24 ) 

FUSE  FAIL  ON  (ACTIVATE  LV24) 
FUSE  FAIL  ON  (ACTIVATE  LV24) 
FAIL  ON/CLOSED  (ACTIVATE 
LV24 ) 


D-ll 


MDAC 

ID 

5129 

5130 
5132 
5134 
5136 

5141 

5142 

5143 
5165 

5168 

5169 

5506 

5507 

5511 

5512 

5513 

5514 

5515 

5551 

5552 

5553 

5554 

5555 

5556 

5557 

5558 

5559 


ITEM 


FAILURE  MODE 


REMOTE  POWER  CONTROLLER 
(RPC32 ) 

REMOTE  POWER  CONTROLLER 
(RPC32 ) 

MDM  ( FA3 ) 

MDM  ( FA1 ) 

MDM  ( FA2 ) 

L02  PROPELLENT  DUMP  SEQUENCE 
TOGGLE  SWITCH 

L02  PROPELLENT  DUMP  SEQUENCE 
TOGGLE  SWITCH 
FUSE  ( F31 , F32) 

FUSE 

HYBRID  DRIVER,  TYPE  3 
HYBRID  DRIVER,  TYPE  3 
FUSE  (2)  (1A) 

FUSE  (1A) 

HYBRID  DRIVER,  TYPE  3 
HYBRID  DRIVER,  TYPE  3 

HYBRID  DRIVER,  TYPE  3 

HYBRID  DRIVER,  TYPE  3 

HYBRID  DRIVER,  TYPE  3 

HYBRID  DRIVER,  TYPE  3 
HYBRID  DRIVER,  TYPE  3 
HYBRID  DRIVER,  TYPE  1 
REMOTE  POWER  CONTROLLER 
(RPC24 ) 

REMOTE  POWER  CONTROLLER 
(RPC23 ) 

MDM  ( FA2 ) 

MDM  ( FA3 ) 

MDM  ( FA4 ) 

DIODE  (12A) 


FAIL  ON/CLOSED  (ACTIVATE 
LV24 ) 

FAIL  OPEN  (INHIBIT  LV24 ) 

PREMATURE /ERRONEOUS  ON 
(ACTIVATE  LV24 ) 

PREMATURE /ERRONEOUS  ON 
(ACTIVATE  LV24 ) 
PREMATURE/ERRONEOUS  ON 
(ACTIVATE  LV24 ) 

SHORTS  ( PREMATURE  DUMP 
START) 

FAIL  OPEN  (DUMP  IS  NOT 
STARTED ) 

FAIL  OPEN  (DUMP  IS  NOT 
STARTED ) 

FAIL  OPEN  (PREMATURE 
DEACTIVATE  LV28) 

FAIL  OFF  (PREMATURE 
DEACTIVATION  LV28) 

FAIL  ON  (PREMATURE 
ACTIVATION  OF  LV29) 

FAIL  PREMATURE  OFF 
(INHIBIT  LV30 ) 

FAIL  OPEN/ PREMATURE  OFF 
(INHIBIT  LV3 1 ) 

FAIL  ON  THE  OPEN  COMMAND 
FAIL  PREMATURE/ERRONEOUS 
ON  THE  OPEN  COMMAND 
FAIL  PREMATURE  OFF  (INHIBIT 
LV30) 

FAIL  OPEN/PREMATURE  OFF 
(INHIBIT  LV31 ) 

FAIL  ON  (PREMATURE /ERRONEOUS 
ACTIVATE  LV31 ) 

FUSE  FAIL  OPEN  (INHIBIT  LV76) 
FUSE  FAIL  OPEN  (INHIBIT  LV76) 
FUSE  FAIL  OPEN  (INHIBIT  LV76 ) 
FAIL  OPEN  (INHIBIT  LV76) 

FAIL  OPEN  (INHIBIT  LV76) 

PREMATURE/ERRONEOUS  OFF 
(INHIBIT  LV7 6 ) 
PREMATURE/ERRONEOUS  OFF 
(INHIBIT  LV7 6 ) 

PREMATURE /ERRONEOUS  OFF 
(INHIBIT  LV7 6 ) 

FAIL  OPEN/SHORT  (INHIBIT 
LV7  6 ) 


D-l  2 


FAILURE  MODE 


MDAC 

ID 


5560 

5561 

5766 

5767 

5771 

5772 

5773 

5774 

5775 

5778 

5779 
6012 

6013 

6014 

6015 

6016 
6026 

6071 

6072 

6073 
6075 
6078 

6081 

6082 

6085 

6086 
6088 

6102 

6103 

6105 

6108 

6109 

6121 

6122 


ITEM 


DIODE  ( 12A) 

DIODE 

REMOTE  POWER  CONTROLLER 
(RPC  19) 

REMOTE  POWER  CONTROLLER 
(RPC  20) 

HYBRID  DRIVER,  TYPE  3 

HYBRID  DRIVER,  TYPE  1 

HYBRID  DRIVER,  TYPE  3 

REMOTE  POWER  CONTROLLER 
(RPC  20) 

REMOTE  POWER  CONTROLLER 
(RPC  21) 

DIODE  ( 12A) 

DIODE  ( 12A) 

HYBRID  DRIVER  CONTROLLER  (6) 
REMOTE  POWER  CONTROLLER  (4) 

ISOLATION  AND  BLOCKING 
DIODES  (6) 

FLIGHT  CRITICAL  AFT  MDM  (3) 
INDICATOR  SWITCH  ( PD2 ) 

FLIGHT  CRITICAL  AFT  MDM 
(FA1 ,FA3 ,FA4 ) 

FUSE,  1A  (3) 

TOGGLE  SWITCH 
TOGGLE  SWITCH 
HYBRID  DRIVER  CONTROLLER 
MDM  ( FA1 , 2,  LAI) 

1A  FUSE 

TOGGLE  SWITCH,  32V73A438 
HYBRID  DRIVER  CONTROLLER 
ISOLATION  DIODE  (4) 

MDM 

REMOTE  POWER  CONTROLLER  (2) 

HYBRID  DRIVER  CONTROLLER 
TOGGLE  SWITCH 

ISOLATION  DIODE  (3) 

MDM  ( FA1 , FA3 , FA4 ) 

HYBRID  DRIVER  CONTROLLER 

HYBRID  DRIVER  CONTROLLER 


FAIL  OPEN/SHORT  (INHIBIT 
LV7  6 ) 

FAIL  OPEN/SHORT  (INHIBIT 
LV7  6 ) 

FAILS  PREMATURE/OFF 
(INHIBIT  LV46 ) 

FAILS  PREMATURE/OFF 
(INHIBIT  LV46 ) 

FAIL  ON  (FALSE  CLOSE 
COMMAND) 

PREMATURE /ERRONEOUS  ON 
(FALSE  CLOSE  COMMAND) 

FAIL  ON  (FALSE  CLOSE 
COMMAND) 

FAIL  ON/CLOSED 

FAIL  ON/CLOSED 

FAIL  OPEN  (INHIBIT  LV47) 

FAIL  OPEN  (INHIBIT  LV47 ) 

FAIL  OPEN 

FAIL  OPEN,  FAIL  CLOSED, 
INADVERTENT  OPERATION 
FAIL  OPEN 

FAIL  ON,  FAIL  OFF 

FAIL  OPEN,  FAIL  TO  TRANSFER 

FAIL  ON,  INADVERTENT 

OPERATION 

FAIL  OPEN 

FAIL  OPEN 

FAIL  SHORTED 

INADVERTENT  OUTPUT  (SHORTED) 

FAIL  ON,  INADVERTENT 

OPERATION 

FAIL  OPEN 

FAIL  OPEN 

INADVERTENT  OUTPUT,  SHORTED 
FAIL  OPEN 

FAIL  OPEN,  INADVERTENT 
OUTPUT 

FAIL  OPEN,  INADVERTENT 

OPERATION 

FAIL  OPEN 

FAIL  SHORTED,  INADVERENT 

OPERATION 

FAIL  OPEN 

FAIL  OPEN 

FAIL  ON,  SHORTED, 

INADVERTENT  OUTPUT 
FAIL  OPEN 


D-l  3 


MDAC 

ID 

ITEM 

FAILURE  MODE 

6123 

FUSE  (3) 

FAIL  OPEN 

6141 

MDM  ( FA4 ) 

FAILS  OPEN,  INADVERTENT 

6142 

HYBRID  DRIVER  CONTROLLER  (2) 

OPERATION,  FAILS  ON 
FAIL  OPEN 

6155 

HYBRID  DRIVER  CONTROLLER, 

FAIL  OPEN,  FAIL  SHORTED 

6156 

TYPE  I (6) 

HYBRID  DRIVER  CONTROLLER, 

FAIL  OPEN,  FAIL  SHORTED 

6157 

TYPE  III  (12) 

ISOLATION  DIODES,  12A  (18) 

FAIL  OPEN 

6158 

ISOLATION  DIODES,  4 . 2A  (3) 

FAIL  OPEN 

6159 

ISOLATION  DIODE  (36) 

FAIL  OPEN 

6160 

MODULATOR  DEMODULATOR  (4) 

FAIL  OPEN,  FAIL  SHORTED, 

7110 

FUSE,  1AMP  (9) 

ERRONEOUS  OUTPUT 
OPEN,  FAILS  TO  CONDUCT 

7120 

TOGGLE  SWITCH,  1P3T  (3) 

OPEN,  FAILS  TO  TRANSFER, 

7130 

TOGGLE  SWITCH,  2P3T  (3) 

SHORTED 

OPEN,  FAILS  TO  TRANSFER, 

7160 

ISOLATION  DIODES  (6) 

SHORTED 
SHORTED,  OPEN 

7170 

ISOLATION  DIODES  (9) 

FAILS  OPEN 

7180 

ISOLATION  DIODES  ( 3 ) 

FAILS  OPEN 

7190 

MDM,  FLIGHT  AFT  1,2, 3, 4 

FAILS  OPEN,  ERRONEOUS 

7210 

FUSE,  1AMP  (6) 

OUTPUT  (OFF) 

OPEN,  FAILS  TO  CONDUCT 

7220 

TOGGLE  SWITCH,  2P3T  (3) 

OPEN,  FAILS  TO  TRANSFER, 

7231 

ISOLATION  DIODES  (6) 

SHORTED 

SHORTED 

7260 

ISOLATION  DIODES  (12) 

FAILS  OPEN 
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